InfoSecBulletin Cybersecurity for mankind
Cybersecurity Researcher Jeremiah Fowler uncovered and reported to Express VPN a publicly exposed database that was neither password-protected nor encrypted. The database contained 102,215 documents totaling approximately 79GB.
Brazilian health surveillance platform breach exposes 100K+ sensitive documents
Thousands of data centers are at risk of compromise due to a 22-year-old flaw
Bangladesh Launches (CIRS) and National ICT & Cyber Security Rating System (NRS)
CVE-2026-18574
Check Point Authentication Bypass Hits Management Server
TP-Link RCE and SonicWall Zero-Click Flaws Enable Complete Device Compromise
ExfilSquad releases info of over 100,000 UK police officers, staff
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Jeremiah Fowler said, I saw a lot of sensitive information. This includes personal information like names and CPF/CNPJ numbers, contact details, home addresses, applications for licenses and permits, and documents related to health and safety rules. There were also inspection reports, papers proving compliance, complaints, two compressed backup files, and other items linked to public health monitoring and regulation enforcement.
The researchers say the records seem to come from Brazil’s Health Surveillance Information System, called SISVISA. Even though the records looked linked to SISVISA, it is unclear if the database was owned and run by the organization or by another company.
This government platform helps health officials check sanitation. They inspect places like restaurants, hospitals, and pharmacies. It also helps with licenses and permits and monitors if health rules are followed.
After sending a warning to several agencies, public access was limited soon after and is not available now.
In a report from 2025, it was said that the SISVISA platform was created to fix problems in managing public health checks using technology. Public groups needed tools to make their work easier, cut costs, and work better. SISVISA was meant to help with running, managing, analyzing, and making decisions, improving the group’s ability to plan and connect tech with health goals.
Many government agencies worldwide switched to digital platforms years ago, but many are still changing to digital systems. This is why it is crucial to create apps and platforms with security as a priority. There are many risks when sharing documents and files that have PII and might not be meant for the public. These risks can be simple fraud, targeted phishing, or even identity theft.
