Leif Ames

A misconfigured Advance Passenger Information System (APIS) database linked to Vietnam exposed more than 220 million passenger and crew travel records spanning 2017 to 2026, including names, passport numbers, nationalities, flight details, seat assignments, and baggage references. Researchers said the database was reachable through a chain of security mistakes and default credentials. It was later secured after the disclosure, but it's unclear whether the data had already been copied or abused. BleepingComputer reports: Kinryu Labs discovered the Elasticsearch cluster on June 3 while surveying exposed databases as part of research into ransomware activity. The cluster, named 'pax-info', contained 29 indices and roughly 107 GB of data. Its two principal indices held 210,318,069 passenger records and 10,465,631 crew records, for a combined 220,783,700 entries. According to Kinryu Labs, the cluster was hosted in Viettel-assigned IP space in Hanoi. BleepingComputer could not confirm which Vietnamese organization operated the system. The exposed information included passengers' and crew members' names, dates of birth, sex, nationalities, passport or travel-document numbers, document expiration dates, and issuing countries. Associated travel data included flight numbers and dates, airlines, departure, destination and transit airports, seat assignments, baggage references, and scheduled, estimated, and actual flight times, information typically carried by APIS and related airline systems. Sample records reviewed by BleepingComputer included travelers of Korean, Chinese, Canadian, and New Zealand nationality, among others. While the researchers could not provide a complete breakdown by nationality, the data covered numerous international airlines across Asia-Pacific, Europe, and the Middle East. As a result, the exposed records could relate to people from virtually anywhere who visited or transited through Vietnam over the nine-year period. Kinryu Labs expects to publish additional details on its blog later this week.

Read more of this story at Slashdot.

With the former Dallas Cowboys quarterback on leave after his arrest in July, CBS brought a dependable presence into the booth with Jim Nantz

If you were looking for insight from the CBS team broadcasting Minnesota’s 39-22 comeback win over Green Bay on Sunday afternoon, you were rewarded even before the first snap.

Asked by his play-by-play partner, Jim Nantz, what he was focusing on with new Vikings quarterback Kyler Murray, JJ Watt told viewers that Murray was playing against his former head coach Jonathan Gannon. The now-Green Bay defensive coordinator was dismissed from the head coaching job in Arizona at the end of last season.

Continue reading...

Craig Berg was hypothermic but alert when located on Isle Royale by Michigan police and officials during solo hike

A 70-year-old hiker who had been missing for a week on a Michigan island was rescued on Saturday, according to the US Coast Guard.

Craig Berg was located on Isle Royale with the help of backpackers, Michigan state police troopers and local officials. Even though Berg was found injured and hypothermic, he is “alive and alert”, according to a statement posted to the Isle Royale national park’s Facebook page.

Continue reading...

No run-of-the-mill tech, ‘Curie’ operates at 10 times the resolution of conventional microscopy and could spur discoveries leading to new treatment

The number of young people living with debilitating and incurable bowel conditions worldwide is growing, but researchers now hope a one-of-a-kind microscope will help them understand such diseases and find new treatments.

According to the British Society of Gastroenterology, more than half a million people in the UK are living with inflammatory bowel disease (IBD), with Crohn’s disease and ulcerative colitis the two main forms.

Continue reading...