Are your Prometheus servers and exporters secure? Probably not

- Infosec roundup: Aqua Security found ~296,000 internet-exposed Prometheus exporters and ~40,000 exposed servers leading to data disclosure and potential DoS via the /debug/pprof endpoint; Apple released critical patches; German authorities reported large-scale Citrix Netscaler password-spraying; the Rydox PII marketplace was shut down after years of operation; a Meeten/Realst campaign is delivering an infostealer targeting crypto users; and BeyondTrust revoked a compromised API key that allowed password resets. Mitigation recommendations and investigations are ongoing.