X XFediYour place in the Fediverse
XFEDI

Remote profile

ActivityPub
Profile banner

Mike Sheward

@[email protected]

Author of Digital Forensic/Pen Test/Blue Team Diaries, Hands-on Incident Response and Digital Forensics & Security Operations in Practice! (he/him) #infosec #DFIR #BlueTeam #Pentesting

Open remote profile ↗
Posts

RE: https://infosec.exchange/@SecureOwl/117462750599057124

Update: haven't heard back from the people I informed and they didn't talk about it at this mornings leadership meeting based on the AI summary I just received.

❞ Quoted postMike Sheward

#plexfiltration update - and it's been a while, I probably only check the mailboxes once a week these days I just informed a customer of a SaaS platform (whose security team I'd already reached out too about 6 months ago - and not heard anything from) that the SaaS product had ha

Infosec ExchangeMike Sheward (@[email protected])#plexfiltration update - and it's been a while, I probably only check the mailboxes once a week these days I just informed a customer of a SaaS platform (whose security team I'd already reached out too about 6 months ago - and not heard anything from) that the SaaS product had happily started sending deleteduser.com detailed AI transcription notes of all company meetings, financial KPIs, metrics
↩ Reply ♡ 0 · ↻ 0 ↗ Original

#plexfiltration update - and it's been a while, I probably only check the mailboxes once a week these days

I just informed a customer of a SaaS platform (whose security team I'd already reached out too about 6 months ago - and not heard anything from) that the SaaS product had happily started sending deleteduser.com detailed AI transcription notes of all company meetings, financial KPIs, metrics and summaries - including of the leadership team weekly meeting.

I informed them that thanks to the plexfiltration issue, I had passively been provided with their full product roadmap - notes about vendors and suppliers, cash in hand and financial runway information.

Had I been a malicious sausage, I would've been able to use this information in a myriad of ways. Probably the worst example of confidential information I've seen so far.

#infosec

↩ Reply ♡ 0 · ↻ 0 ↗ Original