Lionsgate streaming platform leaks data of 37 million users

Video streaming platform Lionsgate Play exposed sensitive data on millions of its users, cybersecurity researchers from Cybernews found. T...

Video streaming platform Lionsgate Play exposed sensitive data on millions of its users, cybersecurity researchers from Cybernews found.

The website's team found Lionsgate's platform kept an unprotected ElasticSearch instance, containing 20GB of server logs with roughly 30 million entries. Some of the data dates back to May 2022, and included user IP addresses as well as information on user devices, operating systems, and web browsers. 

While this is not exactly personally identifiable information, it can still be used by threat actors to conduct intrusions, the researchers said.

Possible authentication secrets

“It can be useful in targeted attacks, especially when combined with other leaked or publicly available information,” Cybernews’ team said in its report.

By knowing the IP addresses, the attackers can deliver custom-built malicious payloads to the targets, they added.

But this is not the only data that was leaked via ElasticSearch. Usage data, such as content titles, IDs, and search queries, were also leaked. This data is usually used by analysts to track the platform’s and content’s performance. Furthermore, researchers discovered unidentified hashes with logged HTTP GET requests, which are user-made requests for data, stored on the server.

While the researchers couldn’t say what the hashes are used for, they did say they contain more than 156 characters, meaning they were supposed to stay unchanged for long. 

“Hashes didn’t match any commonly used hashing algorithms. Since these hashes were included in the HTTP requests, we believe they could have been used as secrets for authentication, or just user IDs,” said researchers.

When reached out to by the researchers, Lionsgate responded by closing the open instance. However, an official statement is yet to be made. 

Streaming platforms are popular targets among cybercriminals. Before Lionsgate Play, hackers managed to breach Plex, START, and Carbon TV.



from TechRadar - All the latest technology news https://ift.tt/ox6Uta4
via IFTTT

COMMENTS

BLOGGER
Name

Apps,3858,Business,151,Camera,1155,Earn $$$,3,Gadgets,1741,Games,926,GTA,1,Innovations,3,Mobile,1697,Paid Promotions,5,Promotions,5,Sports,1,Technology,8106,Trailers,796,Travel,37,Trending,4,Trendly News,25335,TrendlyNews,110,Video,5,XIAOMI,13,YouTube - 9to5Google,109,
ltr
item
Trendly News | #ListenNow #Everyday #100ShortNews #TopTrendings #PopularNews #Reviews #TrendlyNews: Lionsgate streaming platform leaks data of 37 million users
Lionsgate streaming platform leaks data of 37 million users
Trendly News | #ListenNow #Everyday #100ShortNews #TopTrendings #PopularNews #Reviews #TrendlyNews
http://www.trendlynews.in/2023/03/lionsgate-streaming-platform-leaks-data.html
http://www.trendlynews.in/
http://www.trendlynews.in/
http://www.trendlynews.in/2023/03/lionsgate-streaming-platform-leaks-data.html
true
3372890392287038985
UTF-8
Loaded All Posts Not found any posts VIEW ALL Readmore Reply Cancel reply Delete By Home PAGES POSTS View All RECOMMENDED FOR YOU LABEL ARCHIVE SEARCH ALL POSTS Not found any post match with your request Back Home Sunday Monday Tuesday Wednesday Thursday Friday Saturday Sun Mon Tue Wed Thu Fri Sat January February March April May June July August September October November December Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec just now 1 minute ago $$1$$ minutes ago 1 hour ago $$1$$ hours ago Yesterday $$1$$ days ago $$1$$ weeks ago more than 5 weeks ago Followers Follow THIS PREMIUM CONTENT IS LOCKED STEP 1: Share. STEP 2: Click the link you shared to unlock Copy All Code Select All Code All codes were copied to your clipboard Can not copy the codes / texts, please press [CTRL]+[C] (or CMD+C with Mac) to copy