【裏切り】セキュリティサービスが情報を漏らしている件、ヤバすぎる

Описание: 論文情報
・url: http://arxiv.org/html/2602.21826v1
・title: The Silent Spill: Measuring Sensitive Data Leaks Across Public URL Repositories
・abstract: A large number of URLs are made public by various platforms for security analysis, archiving, and paste sharing -- such as VirusTotal, URLScan.io, Hybrid Analysis, the Wayback Machine, and RedHunt. These services may unintentionally expose links containing sensitive information, as reported in some news articles and blog posts. However, no large-scale measurement has quantified the extent of such exposures. We present an automated system that detects and analyzes potential sensitive information leaked through publicly accessible URLs. The system combines lexical URL filtering, dynamic rendering, OCR-based extraction, and content classification to identify potential leaks. We apply it to 6,094,475 URLs collected from public scanning platforms, paste sites, and web archives, identifying 12,331 potential exposures across authentication, financial, personal, and document-related domains. These findings show that sensitive information remains exposed, underscoring the importance of automated detection to identify accidental leaks.
==========

VirusTotalやWayback Machineなど、信頼されているセキュリティサービスが逆に情報漏洩の原因に？600万件のURL調査で発覚した1万件超の機密情報流出。パスワードリセットリンク、APIキー、電子署名まで…誰でもアクセスできる状態で放置されていた衝撃の実態を解説します。あなたの会社も知らないうちに情報を垂れ流しているかもしれません。