"Key Aerospace Player Leaks Sensitive Data"

According to research conducted by Cybernews, the top aviation company Safran Group left itself vulnerable to cyberattacks for over a year, thus highlighting the vulnerability of major aviation companies to being targeted by threat actors. The Cybernews research team recently revealed that the global aviation company headquartered in France, which is also the eighth largest aerospace supplier in the world, was leaking critical data because of a misconfiguration of its systems. Safran Group and Airbus, the second largest aerospace company in the world after Boeing, work together to make aerospace equipment. Safran Group is also involved in the development of cutting-edge technology outside of the aviation industry, such as James Webb Telescope modules. The aviation company also builds surface-to-air defense systems and missiles. Researchers discovered a publicly accessible environment file used by the beta version of the open-source video-calling application Jitsi Meet. The Cybernews team suspects that the file was available to the public for about a year and a half, putting Safran Group at risk of possible attacks. The exposed data includes the Laravel app key, JSON Web Token (JWT) key, MySQL credentials, and Simple Mail Transfer Protocol (SMTP) credentials for the "no-reply" email. This article continues to discuss the top aviation company Safran Group leaking sensitive data and the potential impact of this leak. 

Cybernews reports "Key Aerospace Player Leaks Sensitive Data"

Submitted by Anonymous on