TLDR InfoSec · ATTACKS & VULNERABILITIES

MISCONFIGURED FIREBASE INSTANCES LEAKED 19 MILLION PLAINTEXT PASSWORDS

bleepingcomputer.com4 min read

Summary from the TLDR InfoSec newsletter

Three cybersecurity researchers found nearly 19 million plaintext passwords exposed on the internet due to misconfigured Firebase instances. They scanned over five million domains and identified 916 vulnerable websites. These instances revealed more than 125 million sensitive user records that included emails, names, passwords, phone numbers, and bank details.