220M Passports Leaked ✈️ & Microsoft's Biggest Patch Ever 🩹

Two stories from today's security news deserve your attention: a massive travel-data leak that exposed hundreds of millions of passport records, and Microsoft's largest security patch release in its history. Here's what happened and why it matters.

220 Million Passports Exposed in Unsecured Travel Database

Security researchers discovered an exposed database containing Advanced Passenger Information for 220 million travelers and flight crew members, linked to Vietnamese airport systems. The trove included full names, dates of birth, nationalities, passport numbers, expiration dates, and issuing countries — and it was reachable because the system accepted default login credentials. So what's the big deal? Unlike a password, you can't just change your passport number. This kind of data is gold for identity thieves and scammers running travel-related phishing schemes, and it's a reminder that even government-grade systems can be left wide open by basic misconfigurations. If you've traveled internationally recently, it's worth keeping an eye out for unexpected account activity or suspicious "verify your booking" emails.

Read more

Microsoft's Biggest Patch Tuesday Ever: 974 Fixes, 2 Under Active Attack

Microsoft just shipped its largest security update on record: 974 patches in a single release, including 113 rated critical and two zero-day vulnerabilities that attackers were already exploiting before a fix existed. These flaws let attackers escalate their access on a compromised machine, turning a small foothold into full control. Why should you care? If your business runs on Windows — and most do — this is the kind of update you can't afford to sit on. Delayed patching is one of the most common ways attackers get into networks that otherwise have solid defenses. Make sure your IT team (or your automatic updates) get this batch installed as soon as possible.

Read more

Stay ahead of threats with GOCO Security at gocosecurity.com.