1 year ago

In February 2021, UpGuard researchers discovered thathttps://www.upguard.com/resources/research-report-public-documents-used-for-attack-reconnaissance were leaking information in the metadata of public documents hosted on their websites. This discovery is a window into a broader overlooked cyber threat category, increasing the risk of data breaches in the tech industry - data leaks.

When an Rsync service is misconfigured, it’s vulnerable to unauthorized access to any sensitive data stored on a remote endpoint.

Not disabling anonymous access to the Rsync service: This can allow anyone to access the Rsync service without authentication, potentially exposing sensitive data to unauthorized users. Not setting proper permissions for the Rsync service: This can allow unauthorized users to access sensitive data stored on the Rsync server or to modify the data being transferred via the Rsync service.