Open source Prometheus servers and exporters are leaking plaintext passwords and tokens, along with API addresses of internal locations.
First seen on darkreading.com
Jump to article: www.darkreading.com/cloud-security/336k-prometheus-instances-exposed-dos-repojacking