[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fS-G028_eRnVIVA1etPI9JpZK07g6hJ9ccsY-FfeBVso":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"2b63b399-a4e4-4fc0-aa44-c96777863a88","220 million traveler records exposed in Vietnam-linked APIS leak","220-million-traveler-records-exposed-in-vietnam-linked-apis-leak-0d6572","Exclusive: An exposed Advance Passenger Information System (APIS) database held 220 million passenger and crew records containing names, passport numbers, dates of birth, nationalities, and flight details spanning 2017 to 2026. Researchers accessed the Vietnam-linked system through a cloud-based path using default credentials. [...]","An exposed Advance Passenger Information System (APIS) database containing 220 million passenger and crew records was accessible online due to security misconfigurations, including the use of default credentials. The data, spanning from 2017 to 2026, included names, passport numbers, dates of birth, and flight details, potentially affecting travelers of numerous nationalities who flew to, from, or through Vietnam. Researchers discovered the leak and reported it to Vietnamese authorities and relevant airlines, leading to remediation.","220 million traveler records exposed in Vietnam-linked APIS leak due to misconfigurations.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002F220-million-traveler-records-exposed-in-vietnam-linked-apis-leak\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2017\u002F05\u002F29\u002FAirport.jpg","2026-09-08T07:35:50+00:00","2026-09-08T08:00:05.959753+00:00",8,[17,20,23],{"name":18,"type":19},"Elasticsearch","product",{"name":21,"type":22},"Kinryū Labs","vendor",{"name":24,"type":22},"Singapore Airlines","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":25,"icon":27,"name":28,"slug":29},null,"Breaches","breaches",[31,33,38],{"category":32},{"id":25,"icon":27,"name":28,"slug":29},{"category":34},{"id":35,"icon":27,"name":36,"slug":37},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":39},{"id":40,"icon":27,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,24,18],{"controls":46,"vendors":133},[47,76,104],{"slug":48,"name":49,"problem":50,"products":51},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":77,"name":78,"problem":79,"products":80},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[81,88,96],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":83,"url":86,"description":87},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"slug":105,"name":106,"problem":107,"products":108},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[109,117,125],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"orca-security","Orca Security","\u002Fvendor-logos\u002Forca-security.png","orca-cloud-security-platform","Orca Cloud Security Platform","https:\u002F\u002Forca.security\u002Fplatform\u002F","Agentless cloud security platform for posture, vulnerabilities and data exposure.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":154},"default-credentials-expose-220-million-traveler-records-in-apis-database-leak","Default Credentials Expose 220 Million Traveler Records in APIS Database Leak","An Advance Passenger Information System (APIS) database was left publicly accessible due to a combination of security misconfigurations and the use of default credentials, exposing 220 million sensitive passenger and crew records spanning nearly a decade. This failure highlights how foundational security hygiene — particularly changing default credentials and restricting public access to sensitive databases — remains critically neglected even in systems handling highly sensitive personal and travel data. The exposure of passport numbers, dates of birth, and flight details creates significant risk for identity theft, targeted phishing, and potential surveillance of travelers across multiple nationalities. The incident underscores that databases containing personally identifiable information (PII) must never be internet-facing without strong authentication, encryption, and access controls in place.",[139,140,141,142,143,144,145,146,147,148,149,150,151,152,153],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 5: Account Management (elimination of default credentials)","CIS Control 12: Network Infrastructure Management","CIS Control 14: Security Awareness and Skills Training","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 CM-6: Configuration Settings","NIST SP 800-53 SC-7: Boundary Protection","NIST SP 800-53 IA-5: Authenticator Management","NIST SP 800-53 AU-6: Audit Record Review, Analysis, and Reporting","GDPR Article 5(1)(f): Integrity and Confidentiality","GDPR Article 25: Data Protection by Design and by Default","GDPR Article 32: Security of Processing","ISO\u002FIEC 27001:2022 A.8.9: Configuration Management","ISO\u002FIEC 27001:2022 A.8.20: Networks Security","ITIL 4: Change Enablement (configuration baseline management)",{}]