#plexfiltration update - and it's been a while, I probably only check the mailboxes once a week these days
I just informed a customer of a SaaS platform (whose security team I'd already reached out too about 6 months ago - and not heard anything from) that the SaaS product had happily started sending deleteduser.com detailed AI transcription notes of all company meetings, financial KPIs, metrics and summaries - including of the leadership team weekly meeting.
I informed them that thanks to the plexfiltration issue, I had passively been provided with their full product roadmap - notes about vendors and suppliers, cash in hand and financial runway information.
Had I been a malicious sausage, I would've been able to use this information in a myriad of ways. Probably the worst example of confidential information I've seen so far.
#infosec
Mike Sheward
npub1m4…x49em
2026-10-18 16:02:14 UTC
Author Public Key
npub1m47njpj30eznnlfll04m7t4thfa5awwy62m6jk3a965kl2rd9n0svx49emSeen on
wss://relay.momostr.pinkPublished at
2026-10-18 16:02:14 UTCEvent JSON
{
"id": "c39227b26f4c2c070e114805531fb82e8de8e27f5a86ac688171d7e1edfc4286",
"pubkey": "dd7d3906517e4539fd3ffbebbf2eabba7b4eb9c4d2b7a95a3d2ea96fa86d2cdf",
"created_at": 1792339334,
"kind": 1,
"tags": [
[
"t",
"plexfiltration"
],
[
"proxy",
"https://infosec.exchange/@SecureOwl/117462750599057124",
"web"
],
[
"t",
"infosec"
],
[
"proxy",
"https://infosec.exchange/users/SecureOwl/statuses/117462750599057124",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/SecureOwl/statuses/117462750599057124",
"pink.momostr"
],
[
"-"
]
],
"content": "#plexfiltration update - and it's been a while, I probably only check the mailboxes once a week these days\n\nI just informed a customer of a SaaS platform (whose security team I'd already reached out too about 6 months ago - and not heard anything from) that the SaaS product had happily started sending deleteduser.com detailed AI transcription notes of all company meetings, financial KPIs, metrics and summaries - including of the leadership team weekly meeting.\n\nI informed them that thanks to the plexfiltration issue, I had passively been provided with their full product roadmap - notes about vendors and suppliers, cash in hand and financial runway information.\n\nHad I been a malicious sausage, I would've been able to use this information in a myriad of ways. Probably the worst example of confidential information I've seen so far.\n\n#infosec",
"sig": "007e0c411e86360e51f0c1c4f154c362e877d3b25fcbf44ff1926d939014d57c6df06f69c8cfbb4745de4d226a0a21350c3b3c3af5d417f90f095dae084faa7e"
}