"Siemens Metaverse Exposes Sensitive Corporate Data"

Siemens Metaverse, a virtual space designed to replicate actual machines, factories, and other highly complex systems, has exposed sensitive information, including the company's office layouts and Internet of Things (IoT) devices. Siemens, a German multinational company with over $71 trillion in revenue and 300,000 employees, has also joined the metaverse movement. In 2022, it partnered with the American multinational technology company NVidia to create the industrial metaverse. The Cybernews research team discovered that the Siemens Metaverse platform, which seeks to create digital 'twins' of its factories and offices, was leaking sensitive data, which could have had catastrophic repercussions for the company and other large corporations using its services, such as ransomware attacks. The research team found an environment file hosted on the company's domain, containing ComfyApp credentials and endpoints. Siemens was also found to have exposed four sets of WordPress users and three sets of backend and authentication endpoint URLs across multiple endpoints of the impacted systems. This article continues to discuss the Siemens Metaverse data leak and other security problems facing the metaverse.

Cybernews reports "Siemens Metaverse Exposes Sensitive Corporate Data"