Latest elasticsearch publications

Thailand’s largest mobile network was leaking customer internet records in real-time

Thailand’s biggest mobile operator has pulled an unprotected cloud server that exposed the internet activity of its customers in real-time.

The server, which belonged to AWN, a subsidiary of AIS, a mobile phone operator with 39.87 million customers in Thailand, was live-leaking customer DNS query and NetFlow logs.

The ElasticSearch database was discovered by security researcher Justin Paine on 7 May, by which point it had been publicly accessible for almost a week.

Honda leaks database containing 134 million company documents

Stockpile of Honda internal system data found on unsecured Elasticsearch database A security researcher has found an unsecured Elasticsearch database belonging to Honda Motor Company containing 134 million rows of internal network and employee computer data. Justin Paine, the researcher who discovered the database on 4 July on Shodan, said the 40GB database “appeared to… Read More