Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #8
GMO Trust Login left admin files publicly exposed for nine years
Original: GMO Trust Login, a single sign-on service run by GMO GlobalSign, kept files from administrators' bulk operations in the
GMO Trust Login, a single sign-on service run by GMO GlobalSign, stored files from administrators' bulk operations in a public storage area used for serving logos. Anyone could list and download them from November 2017 to September 2026. Reports say files covering 45,030 people at 2,492 organizations were affected, raising concerns about how long the exposure went unnoticed.
Why now: The disclosure that sensitive data sat publicly accessible for nearly nine years is drawing criticism of GMO GlobalSign's security practices.
Evidence
- GMO Trust Login, a single sign-on service run by GMO GlobalSign, kept files from administrators' bulk operations in the public storage area it used to serve logos. Anyone could list and download them from November 2017 to September 2026. Files covering 45,030 people at 2,492… · japancyberwatch@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/4672198