Unsecured Perforce Servers Leak Sensitive Data from Major Organizations

Despite improvements, a recent analysis by SecurityWeek has identified over 1,500 exposed Perforce P4 instances. These unsecured servers allow unauthorized access, enabling attackers to read sensitive files stored within the Perforce repositories. This exposure poses a significant risk to organizations relying on Perforce for version control and code management.

Organizations using Perforce need to urgently audit their deployments for external accessibility. The risk is clear: intellectual property, sensitive code, and potentially configuration details could be exfiltrated by threat actors. Defenders must prioritize securing these instances, likely by restricting network access and ensuring proper authentication controls are in place.