HIGHIncident ResponseOct 8, 2026 · 6 min
The SQLite File That Exposed a Monitoring Environment
A three-year-old Grafana path traversal led to a plaintext database, then to Zabbix API access, then to a full infrastructure map.
Tags / 3 posts
#Incident Response
Read
CRITICALData ExposureOct 14, 2026 · 5 min
The Registry That Called Everyone: 265 Million Numbers Exposed at India's DND
Two unauthenticated CouchDB nodes held India's entire Do-Not-Disturb registry — 245 million phone preferences, 7 million consent records and full residential PII — behind nothing but an open port.
HIGHIncident ResponseAug 15, 2026 · 8 min
One GET Request, One Production Backend: Anatomy of a .env Exposure
A single unauthenticated HTTP GET returned the entire production secrets bundle for a customer-facing WhatsApp lead-generation bot — database, messaging provider, voice AI, LLM proxy and webhook secrets, all served as plain text.