Security AffairsPierluigi Paganini
Thousands of sensitive secrets published on JSONFormatter and CodeBeautify
A recent study by WatchTowr revealed that users of JSONFormatter and CodeBeautify have inadvertently leaked thousands of sensitive secrets, including passwords, private keys, and API tokens. The research identified over 80,000 pieces of JSON data containing critical credentials from various sectors such as government, finance, and healthcare. The leaks occurred due to users saving sensitive information on these platforms without realizing it was publicly accessible.
WatchTowr emphasized the need for better security practices and warned that attackers are already exploiting these vulnerabilities. The findings highlight the ongoing issue of security negligence among users.