Coding error in forgotten API blamed for massive data breach

TLDRA coding error in a forgotten API at Australian telco Optus led to a massive data breach, exposing personal data of over nine million customers. The error, which broke API access controls, was detected but not fully fixed, leaving an internet-facing domain vulnerable. An attacker exploited this oversight, triggering regulatory

2m read time From theregister.com
Post cover image

Sort: