Following Orders: A Day in the Life of an Iranian Telegram Bot Farm | UpGuard
Inside 24 hours of an Iranian Telegram bot farm: how a misconfigured server exposed the operation selling fake followers to financial scammers.
2026/7/31
閱讀更多U
UpGuard Data Breach Research
Adult Supervision: How OnlyFans Takedowns Quietly Police Compromised Domains | UpGuard
Adult-content creators filing DMCA takedowns are inadvertently exposing thousands of compromised .gov and .edu sites used for parasite SEO scams.
2026/7/29
閱讀更多Open House: How an Unauthenticated MCP Server Exposed India's Largest Real Estate Platform | UpGuard
An exposed DBHub instance leaked millions of records from India's largest real estate platform—the biggest MCP server breach to date.
2026/7/21
閱讀更多Own Goal: Inside the Cyber Risks of the 2026 World Cup | UpGuard
Free World Cup streams and black-market betting sites are leaking fan data. UpGuard research reveals the hidden cyber risks of the 2026 tournament.
2026/7/7
閱讀更多Breaking Confinement: How a Corrections Vendor Exposed Inmate Communications | UpGuard
An exposed Azure storage bucket contained millions of documents sent through a jail messaging app, including driver's licenses used for identity verification.
2026/6/2
閱讀更多Shared Context: How an MCP Server Exposed a Private Equity Firm | UpGuard
A misconfigured MCP server provided complete access to a private equity firm's data lake, illustrating the unique risks of AI adoption for specialized knowledge workers.
2026/5/19
閱讀更多Read Receipts: How Mail Server Logs Put Corporate Clients at Risk | UpGuard
A publicly accessible server with email logs reveals how much information such infrastructure holds–including evidence of attackers looking for it.
2026/5/1
閱讀更多Shared Enemy: Inside a Chinese Dark Web Monitoring Database | UpGuard
An exposed database of dark web threat intel reveals how China responds to the common threat of the cyber-criminal underground.
2026/4/2
閱讀更多Social Insecurity: Billions of Social Security Number and Passwords | UpGuard
UpGuard research found a trove of sensitive information in an exposed Elastic database. Getting to the bottom of what it meant led us down an interesting path.
2026/2/20
閱讀更多Streamlit: The Tip of The Shadow AI Iceberg | UpGuard
Tens of thousands of AI-enabled web applications using the Streamlit framework are publicly available, exposing PII and other confidential data.
2025/12/10
閱讀更多