TLDR InfoSec · MISCELLANEOUS

OWASP DATA BREACH CAUSED BY SERVER MISCONFIGURATION

securityweek.com3 min read

Summary from the TLDR InfoSec newsletter

The OWASP Foundation announced a data breach exposing personal information provided by aspiring members in resumes submitted between 2006 and 2014 as part of the old membership process. The breach, caused by a misconfiguration on OWASP's old wiki server, compromised names, addresses, phone numbers, email addresses, and other identifiable information of tens of thousands of members from the non-profit software security community organization.