21CTO
21CTO
Sep 20, 2023 · Information Security

How a Misconfigured Azure SAS Token Exposed 38 TB of Microsoft Data

Microsoft inadvertently exposed 38 TB of private data, including employee passwords, private keys, and over 30,000 internal Teams messages, due to a misconfigured Azure SAS token in a public GitHub repository, prompting security researchers to alert the company and prompting Microsoft to revoke the token and tighten SAS best practices.

Azure SASMicrosoftSecurity incident
0 likes · 6 min read
How a Misconfigured Azure SAS Token Exposed 38 TB of Microsoft Data
21CTO
21CTO
Apr 13, 2023 · Information Security

How a Redis Client Bug Exposed ChatGPT Users’ Data – What Went Wrong?

A recent OpenAI investigation revealed that a bug in the redis-py client caused ChatGPT to leak conversation histories and personal details of about 1.2% of Plus users, prompting a temporary service shutdown and a rapid patch deployment.

ChatGPTbackenddata leak
0 likes · 6 min read
How a Redis Client Bug Exposed ChatGPT Users’ Data – What Went Wrong?
dbaplus Community
dbaplus Community
Mar 28, 2023 · Information Security

How a Redis Client Bug Exposed ChatGPT User Data and What OpenAI Fixed

A recent bug in the open‑source redis‑py library caused ChatGPT to leak personal data of about 1.2 % of Plus users, allowing some users to see others' names, emails, and partial credit‑card details; OpenAI issued an apology, published a post‑mortem, and deployed a patch to fix the Redis Cluster async client issue.

ChatGPTInformation SecurityOpenAI
0 likes · 6 min read
How a Redis Client Bug Exposed ChatGPT User Data and What OpenAI Fixed
MaGe Linux Operations
MaGe Linux Operations
Oct 21, 2022 · Information Security

What the Microsoft BlueBleed Leak Reveals About Cloud Misconfigurations

A misconfigured Azure Blob storage bucket exposed 2.4 TB of sensitive data from over 65,000 entities in 111 countries, prompting Microsoft to acknowledge the breach, dispute its scale, and outline best practices while highlighting cloud storage misconfigurations as a leading attack vector.

AzureInformation SecurityMicrosoft
0 likes · 7 min read
What the Microsoft BlueBleed Leak Reveals About Cloud Misconfigurations
21CTO
21CTO
Aug 6, 2022 · Information Security

How Twitter Fixed a Critical Bug and Stopped a 5.4M‑Account Data Leak

Twitter’s tech team patched a major security flaw that exposed email addresses and phone numbers of over 5.4 million accounts, prompting a $30,000 data sale on Breached Forums and a $5,040 bug‑bounty reward for the researcher who reported it.

Bug BountyInformation SecurityTwitter
0 likes · 3 min read
How Twitter Fixed a Critical Bug and Stopped a 5.4M‑Account Data Leak
21CTO
21CTO
Apr 5, 2021 · Information Security

Google Beats Oracle on API Copyright and Other Tech Headlines You Need to Know

The Supreme Court ruled APIs uncopyrightable, letting Google use Java code in Android, while LG exits the smartphone market, a massive Facebook data leak surfaces, UK developer jobs surge amid skill shortages, and Python 3.9.4 patches critical security flaws.

APIFacebookGoogle
0 likes · 6 min read
Google Beats Oracle on API Copyright and Other Tech Headlines You Need to Know