InfoSecBulletin Cybersecurity for mankind
Cybersecurity Researcher Jeremiah Fowler uncovered and reported to Express VPN a publicly exposed database that was neither password-protected nor encrypted. The database contained 102,215 documents totaling approximately 79GB.
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
Jeremiah Fowler said, I saw a lot of sensitive information. This includes personal information like names and CPF/CNPJ numbers, contact details, home addresses, applications for licenses and permits, and documents related to health and safety rules. There were also inspection reports, papers proving compliance, complaints, two compressed backup files, and other items linked to public health monitoring and regulation enforcement.
The researchers say the records seem to come from Brazil’s Health Surveillance Information System, called SISVISA. Even though the records looked linked to SISVISA, it is unclear if the database was owned and run by the organization or by another company.
This government platform helps health officials check sanitation. They inspect places like restaurants, hospitals, and pharmacies. It also helps with licenses and permits and monitors if health rules are followed.
After sending a warning to several agencies, public access was limited soon after and is not available now.
In a report from 2025, it was said that the SISVISA platform was created to fix problems in managing public health checks using technology. Public groups needed tools to make their work easier, cut costs, and work better. SISVISA was meant to help with running, managing, analyzing, and making decisions, improving the group’s ability to plan and connect tech with health goals.
Many government agencies worldwide switched to digital platforms years ago, but many are still changing to digital systems. This is why it is crucial to create apps and platforms with security as a priority. There are many risks when sharing documents and files that have PII and might not be meant for the public. These risks can be simple fraud, targeted phishing, or even identity theft.
