Flaw in photo booth maker’s website exposes customers’ pictures
Hama Film makes photo booths that upload pictures and videos online. But their backend systems have a simple flaw that allows anyone to download customer pictures.
Security
Security flaws in Freedom Chat app exposed users’ phone numbers and PINs
The founder of Freedom Chat said the company has reset user PINs and released a new version to app stores.
CEO of South Korean retail giant Coupang resigns after massive data breach
The massive data breach at the South Korean retail giant Coupang affects more than half of the country’s population.
Petco takes down Vetco website after exposing customers’ personal information
TechCrunch found Petco’s veterinary clinics were spilling customers’ personal information and medical histories of their pets to the open web.
FTC upholds ban on stalkerware founder Scott Zuckerman
Zuckerman, who used to run the stalkerware apps SpyFone and SpyTrac, claimed the ban is hurting his unrelated business.
Google details security measures for Chrome’s agentic features
Google details how it is enacting security guardrails before rolling out agentic capabilities on Chrome.
Petco’s security lapse affected customers’ SSNs, drivers’ licenses and more
Petco said the exposure was due to an error in an application, and that it is notifying victims’ whose data was affected.
Petco confirms security lapse exposed customers’ personal data
The pet company has published almost no details about what happened, who was affected, and what personal data was exposed.
Pentagon’s Signalgate report finds Pete Hegseth violated military policies
It has been months since a group of Trump administration officials put together a Signal group chat to discuss classified military intelligence ahead of a military strike in Yemen while inadvertently adding a journalist, and now the Pentagon’s inspector general has released its report on the mess. The results of Steven Stebbins’ eight-month-long investigation found […]
Sanctioned spyware maker Intellexa had direct access to government espionage victims, researchers say
Based on a leaked video, security researchers alleged that Intellexa staffers have remote live access to their customers’ surveillance systems, allowing them to see hacking targets’ personal data.