8 stories tagged misconfiguration, newest first.
4 points by rvz | 0 comments
TechCrunch article reporting that some Supabase customers have misconfigured databases publicly exposing large amounts of personal data.
338 points by denysvitali | 82 comments
A blog post on finding and exploiting common misconfigurations in Microsoft IIS web servers, starting from the default IIS splash page.
1037 points by mahkeiro | 940 comments
404 Media article reporting that the DOGE.gov website's database was left open, allowing anyone to push updates to the site.
925 points by todsacerdoti | 228 comments
KrebsOnSecurity article on a MasterCard DNS server misconfiguration, a typo'd nameserver domain that went unnoticed for nearly five years until a researcher registered it.
499 points by MrBruh | 111 comments
Security researchers' write-up on scanning the internet for misconfigured Firebase instances, finding 900 sites exposing about 125 million user records.
319 points by indosauros | 103 comments
Tell HN post noting microsoft.com's DNS A records briefly included private addresses 192.168.1.0 and 192.168.1.1, with nslookup output.
481 points by celesian | 142 comments
Hakai Offensive Security blog post on hunting Nginx alias traversal misconfigurations in the wild, including one that leaked Bitwarden vault data.
358 points by alosch7 | 96 comments
Wiz Research blog post explaining how a common Azure Active Directory misconfiguration exposed Microsoft apps, enabling Bing.com result manipulation and account takeover.