“Chat & Ask AI,” a highly popular mobile application available on both Google Play and the Apple App Store, has suffered a significant data exposure.
An independent security researcher discovered a vulnerability that left approximately 300 million private messages accessible to the public.
This breach impacts more than 25 million users, raising serious concerns about privacy and data handling in the booming AI app market.
The exposure was identified by a security researcher known as Harry, who reported his findings to 404 Media.
According to the analysis, the root cause of the leak was not a sophisticated cyberattack but a simple misconfiguration.
The app utilizes Google Firebase, a common platform for mobile app development. Firebase databases are secure by default, but developers must configure specific rules to keep data private.
In this case, the settings were left open, allowing anyone with basic technical knowledge to become an “authenticated” user and access the backend storage...............
gbhackers.com
An independent security researcher discovered a vulnerability that left approximately 300 million private messages accessible to the public.
This breach impacts more than 25 million users, raising serious concerns about privacy and data handling in the booming AI app market.
The exposure was identified by a security researcher known as Harry, who reported his findings to 404 Media.
According to the analysis, the root cause of the leak was not a sophisticated cyberattack but a simple misconfiguration.
The app utilizes Google Firebase, a common platform for mobile app development. Firebase databases are secure by default, but developers must configure specific rules to keep data private.
In this case, the settings were left open, allowing anyone with basic technical knowledge to become an “authenticated” user and access the backend storage...............
25 Million Users Affected as AI Chat Platform Leaks 300 Million Messages
"Chat & Ask AI," a highly popular mobile application available on both Google Play and the Apple App Store, has suffered a significant data exposure.
gbhackers.com
