Experts Warn of Unprotected Prometheus Endpoints Exposing Sensitive Information

In The Hacker News - Original news source is thehackernews.com by Blog Writer

Post Sharing
A large-scale unauthenticated scraping of publicly available and non-secured endpoints from older versions of Prometheus event monitoring and alerting solution could be leveraged to inadvertently leak sensitive information, according to the latest research.
“Due to the fact that authentication and encryption support is relatively new, many organizations that use Prometheus haven’t yet enabled