#plexfiltration update - and it's been a while, I probably only check the mailboxes once a week these days
I just informed a customer of a SaaS platform (whose security team I'd already reached out too about 6 months ago - and not heard anything from) that the SaaS product had happily started sending deleteduser.com detailed AI transcription notes of all company meetings, financial KPIs, metrics and summaries - including of the leadership team weekly meeting.
I informed them that thanks to the plexfiltration issue, I had passively been provided with their full product roadmap - notes about vendors and suppliers, cash in hand and financial runway information.
Had I been a malicious sausage, I would've been able to use this information in a myriad of ways. Probably the worst example of confidential information I've seen so far.
#infosec
Mike Sheward
npub186…k78mq
2026-10-18 16:02:14 UTC
Author Public Key
npub186dunx4ja6f8txz49wh8ynkjsueretrnc4hjl8xhx6cfp923dsgswk78mqSeen on
wss://relay.ditto.pubPublished at
2026-10-18 16:02:14 UTCEvent JSON
{
"id": "bed071b7a32de5606792f3ac9d434290d5b1e5aaf79305f7b73a30ac5aa9953d",
"pubkey": "3e9bc99ab2ee927598552bae724ed287323cac73c56f2f9cd736b09095516c11",
"created_at": 1792339334,
"kind": 1,
"tags": [
[
"t",
"plexfiltration"
],
[
"t",
"infosec"
],
[
"proxy",
"https://infosec.exchange/users/SecureOwl/statuses/117462750599057124",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "#plexfiltration update - and it's been a while, I probably only check the mailboxes once a week these days\n\nI just informed a customer of a SaaS platform (whose security team I'd already reached out too about 6 months ago - and not heard anything from) that the SaaS product had happily started sending deleteduser.com detailed AI transcription notes of all company meetings, financial KPIs, metrics and summaries - including of the leadership team weekly meeting.\n\nI informed them that thanks to the plexfiltration issue, I had passively been provided with their full product roadmap - notes about vendors and suppliers, cash in hand and financial runway information.\n\nHad I been a malicious sausage, I would've been able to use this information in a myriad of ways. Probably the worst example of confidential information I've seen so far.\n\n#infosec",
"sig": "70610e5bacaa8bf24fc70c629e26abd8df5e982012b338acaeab23a58b6763784c74b5095a208d92b57bad398ea98079c7621f7f87b612efa4dde8b18b4f487f"
}