Misconfigured object storage exposed 2.3 million broker settlement records for nine weeks
The vendor says no evidence of mass download exists, but access logs covering the first four weeks of exposure were never retained.
The vendor says no evidence of mass download exists, but access logs covering the first four weeks of exposure were never retained.
Platform teams that relied on the operator for tenant separation are being told to assume cross-tenant access was possible.
The shift is being driven less by threat modelling than by contractual pressure from regulators and clients.
Exposure required precise timing, but researchers demonstrated reliable retrieval in a controlled test.
Unauthenticated session-token forgery in the appliance login handler.
Northgate SecureEdge 9.x
Admission webhook bypass allows cross-namespace pod scheduling.
TenantMesh Operator 4.2
Retention policy can be altered by a low-privileged backup service account.
VaultLine Backup 12.6
Grace Nwosu • • 5 min read
Mara Ellison • • 7 min read
Daniel Okonjo • • 9 min read
Priya Raghunathan • • 6 min read
Tomas Berg • • 8 min read