@r-protocols

How a Misconfigured API Exposed Founder, Investor, and Employee Data at a Leading Venture Capital Firm

1d ago · 6 min read · A globally leading early-stage venture capital firm, known for backing high-growth technology and AI startups, was found exposing sensitive internal and ecosystem data through a misconfigured Algolia

Customer Orders to Internal Logistics: How a Single API Exposed an Entire Commerce Operation

May 8 · 3 min read · A multi-million dollar omni-channel commerce platform serving customers across e-commerce, retail stores, warehouse operations, and logistics infrastructure was found exposing highly sensitive custome

From Burger Order to Data Breach: An API Security Case Study

Dec 7, 2025 · 3 min read · The Target Company is a large food & beverage commerce enablement platform. The platform is a powerhouse for 10,000+ restaurants, including leading Burgers, Tacos, Pizza fast food chains. A critical misconfiguration was identified within the order ma...

Exposing iCloud Users’ Names, Phone Numbers, and Email Addresses

Nov 22, 2025 · 4 min read · During security research on iCloud’s web functionalities, a misconfiguration was identified within the Notes sharing feature that exposed sensitive user metadata. Although the contents of private note