Misconfigured Django apps leak database passwords and API keys for nearly 30,000 servers

Recently, security researcher Fábio Castro discovered 28,165 misconfigured Django applications that exposed sensitive information, including passwords, API keys, and AWS access tokens. Fábio Castro stated that this was caused by Django developers forgetting to disable the debug...