Today I wanna report an important bug dues to miss configuration system.
The Miss Configuration Bug (MCB) affects the website of the Department of Security and Health, in Malaysia. Up to 200 mails and password are included in this directory listing.

I Know, it's incredible, lots of mails and lots of password "free" in the net, moreover in a Excel paper...
It's another example of security evangelist lack.
Related Reading: 1 and 2.
VIA security.my.

Introduction i-SOON (上海安洵), a prominent contractor for various Chinese government agencies such […]
When I saw a threat actor hijacking the X account of Google's […]
LOCKBIT 3.0 is a notorious Ransomware Group that was first identified on […]