InfoSecBulletin Cybersecurity for mankind
Cybersecurity Researcher Jeremiah Fowler uncovered and reported to Express VPN a publicly exposed database that was neither password-protected nor encrypted. The database contained 102,215 documents totaling approximately 79GB.
Chameleon SEO Poisoning
Hackers poison Bing and Google search results to deliver phishing banking pages
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Jeremiah Fowler said, I saw a lot of sensitive information. This includes personal information like names and CPF/CNPJ numbers, contact details, home addresses, applications for licenses and permits, and documents related to health and safety rules. There were also inspection reports, papers proving compliance, complaints, two compressed backup files, and other items linked to public health monitoring and regulation enforcement.
The researchers say the records seem to come from Brazil’s Health Surveillance Information System, called SISVISA. Even though the records looked linked to SISVISA, it is unclear if the database was owned and run by the organization or by another company.
This government platform helps health officials check sanitation. They inspect places like restaurants, hospitals, and pharmacies. It also helps with licenses and permits and monitors if health rules are followed.
After sending a warning to several agencies, public access was limited soon after and is not available now.
In a report from 2025, it was said that the SISVISA platform was created to fix problems in managing public health checks using technology. Public groups needed tools to make their work easier, cut costs, and work better. SISVISA was meant to help with running, managing, analyzing, and making decisions, improving the group’s ability to plan and connect tech with health goals.
Many government agencies worldwide switched to digital platforms years ago, but many are still changing to digital systems. This is why it is crucial to create apps and platforms with security as a priority. There are many risks when sharing documents and files that have PII and might not be meant for the public. These risks can be simple fraud, targeted phishing, or even identity theft.
