Exposed DB, Exposed Credentials, Exposed KEV Exposures, Subdomain Takeover
The article announces the publication of real-time metrics on multiple security threat categories, including exposed databases, leaked credentials, exposed AI keys, known exploited vulnerabilities (KEV) exposures, and subdomain takeovers. The data is continuously updated based on the publisher's scanning infrastructure.
Background
Echelon Graph is a cybersecurity intelligence platform that continuously scans the internet for misconfigured and vulnerable systems. This Hacker News post shares live dashboards tracking:
- **Exposed DBs**: Databases (MongoDB, Elasticsearch, etc.) left publicly accessible without passwords.
- **Leaked credentials**: Stolen or accidentally exposed login details scraped from breaches and public repositories.
- **Exposed AI keys**: API keys for services like OpenAI or AWS Bedrock left in code or config files — anyone can use them to run up bills.
- **KEV exposure**: "Known Exploited Vulnerabilities" — flaws that are already being actively abused in the wild (the term comes from CISA's catalog).
- **Subdomain takeover**: When a DNS record points to a cloud service (e.g., AWS S3, GitHub Pages) that has been deactivated, allowing an attacker to claim that address and impersonate the original site.
The numbers update in real time because Echelon's own scanners crawl the web looking for these exposures. Posts like this are common on Hacker News as both a demonstration of capability and a public-service warning about the scale of internet-wide misconfiguration.