How data on a billion people may have leaked from a Chinese police dashboard
Details have emerged on how more than a billion personal records were stolen in China and put up for sale on the dark web, and it all boils down to a unprotected online dashboard that left the data open to anyone who could find it.apparently stolen from the Shanghai police was put up for sale on the underground Breach Forums by someone with the handle ChinaDan for 10 Bitcoin .
But according to cybersecurity experts, this may not be correct. Instead, the data was exposed to the world from a non-password-protected web dashboard. And that public-facing Kibana-powered site had been left open since the end of 2020, according toOpen-source Kibana is used all around the world to view and manage Elasticsearch clusters."The service leaking the data was an unprotected Kibana instance running on port 5601, the default Kibana port," LeakIX claimed.
Now it all seems to click into place. If LeakIX is correct, the thief may have pulled the data from the unprotected public-facing Kibana instance or from the underlying public Elasticsearch cluster that Kibana provided a web interface for. The exposed Elasticsearch cluster's version, 5.5.
Brasil Últimas Notícias, Brasil Manchetes
Similar News:Você também pode ler notícias semelhantes a esta que coletamos de outras fontes de notícias.
A huge data leak in China was not unexpectedChinese authorities have refused to comment. But the leaked data appear to be real
Consulte Mais informação »
Britain and America sound a joint alarm over ChinaA few years ago Europe was deeply split over China. But at a recent NATO summit all 30 allies agreed that China was now in “strategic partnership” with Russia, and that the duo were “at the forefront of an authoritarian pushback”
Consulte Mais informação »
Fewer people are dying in floods in ChinaLocals in Yingde, in the southern province of Guangdong, say the current floods are the worst they have ever seen. Yet there have been no reported deaths
Consulte Mais informação »
A huge data leak in China was not unexpectedChinese authorities have refused to comment. But the leaked data appear to be real
Consulte Mais informação »
PlayStation Plus July games may have leakedSome of July’s PlayStation Plus Extra and Premium tier games may have leaked before Sony’s official announcement. The information comes…
Consulte Mais informação »