FlagThis

ImgSrc: cdn.prod.websit

References :

• Zack Whittaker: New: API security testing firm APIsec exposed an internal database to the internet without a password. The database contained customer info and other data generated while monitoring customer APIs for security weaknesses, per researchers at UpGuard, which found it.
• techcrunch.com: API testing firm APIsec exposed customer data during security lapse
• www.upguard.com: UpGuard can now report that it has secured an Elasticsearch database containing data from APIsec.ai, a security company that claims to be used by 80% of the Fortune 100.

Classification:

• HashTags: #DataBreach #APIsecurity #SecurityLapse
• Company: APIsec
• Target: APIsec customers
• Product: APIsec
• Feature: Database Exposure
• Type: DataBreach
• Severity: Major