Skip to content

PubNub Publish Key

Service Name: PubNub

Service Description: PubNub is a real-time communication platform that provides APIs for building chat, IoT, and real-time applications. It enables developers to build and scale real-time applications with features like messaging, presence, and storage.

Service Address: https://www.pubnub.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the account level through PubNub's Access Manager (PAM).

Secret Access Scope: Grants the ability to publish messages to PubNub channels. Publish keys allow applications to send messages to specific channels that subscribers can receive.

Secret Revokement URL: https://admin.pubnub.com/#/login (Access the PubNub Admin Portal to manage keys)

Secret Example: pub-c-74a31063-fc5c-4c92-9b18-7791c1d2231b

Suspicious Activity Investigation Instructions:

  • Review PubNub analytics dashboard for unusual message publishing patterns
  • Check for unexpected spikes in message volume or publishing frequency
  • Monitor for publishing to unauthorized or unexpected channels
  • Review access logs for suspicious IP addresses or locations
  • Examine message content for potential data exfiltration or malicious payloads

Mitigation Instructions:

  • Log in to the PubNub Admin Portal at https://admin.pubnub.com/

  • Navigate to the App section containing the compromised key

  • Generate a new publish key to replace the compromised one
  • Update all legitimate applications with the new publish key
  • Revoke the compromised publish key
  • Review and update PubNub Access Manager (PAM) settings to restrict channel

access

  • Consider implementing token-based authentication for more granular control
  • Monitor the new key for any suspicious activity