Gaining Unauthenticated Access to Google Cloud Partner Registry InformationDuring security research on an internal Google Cloud Platform environment, an unauthenticated API exposure was identified that allowed access to partner registry information without requiring a valid Jun 16 · 6 min readrptl.hashnode.dev
How a Misconfigured API Exposed Founder, Investor, and Employee Data at a Leading Venture Capital FirmA globally leading early-stage venture capital firm, known for backing high-growth technology and AI startups, was found exposing sensitive internal and ecosystem data through a misconfigured Algolia Jun 12 · 6 min readrptl.hashnode.dev
Customer Orders to Internal Logistics: How a Single API Exposed an Entire Commerce OperationA multi-million dollar omni-channel commerce platform serving customers across e-commerce, retail stores, warehouse operations, and logistics infrastructure was found exposing highly sensitive customeMay 8 · 3 min readrptl.hashnode.dev
From Burger Order to Data Breach: An API Security Case StudyThe Target Company is a large food & beverage commerce enablement platform. The platform is a powerhouse for 10,000+ restaurants, including leading Burgers, Tacos, Pizza fast food chains. A critical mDec 7, 2025 · 3 min readrptl.hashnode.dev
Exposing iCloud Users’ Names, Phone Numbers, and Email AddressesDuring security research on iCloud’s web functionalities, a misconfiguration was identified within the Notes sharing feature that exposed sensitive user metadata. Although the contents of private noteNov 22, 2025 · 4 min readrptl.hashnode.dev