Index live· 1,284 files · 148 editions

Search the index

Search files, actors, editions, indicators and standards2 results

Try

Results for “Unauthenticated API enumeration”Newest first

Twilio Confirmed 33 Million Authy Phone Numbers Through an Open Endpoint

The factor held. Being known to use it became the attack surface.

UnattributedUnauthenticated API enumerationTechnologyIdentity

Sev 43 July 2024TargetTwilio AuthyActorUnattributedUSA

Trello Profile Data for 15 Million Users Scraped Through a Public API

Every record was already public. The endpoint added the one thing that was not: confirmation.

UnattributedUnauthenticated API enumerationTechnologyAPI

Sev 323 January 2024TargetTrelloActorUnattributedUSA

ForensicPost

Independent reporting on digital forensics and incident response.

SectionsBreaches Ransomware Nation-state Cloud

DataCase files Data export Actor index Glossary Methodology

ContactSecure tips Corrections The desk Ethics

© 2026 ForensicPost Media · the desk · newsletterGlossaryNo search logging