APIsec Confirms Security Lapse Exposed Customer Data

•

2 days ago

Summary

API testing firm APIsec confirms exposure of internal database containing customer data. Data includes names, email addresses, and security details of customers' APIs. Exposure was due to human mistake, not malicious incident.

Key Points

The exposed database contained records dating back to 2018, including names, email addresses, and security details of APIsec's corporate customers.
The data included information about the attack surfaces of APIsec's customers, such as whether multi-factor authentication was enabled on a customer's account.
APIsec claims it quickly secured the database after being notified by UpGuard, but some personal information of its customers' employees and users remained accessible
A former employee's AWS keys and Slack/GitHub credentials were also found in the dataset

Why It Matters

This data breach highlights the importance of securing sensitive customer data and emphasizes the need for proactive measures to prevent such incidents.

Author

Zack Whittaker

More Headlines

OpenAI's ChatGPT Image Generation Tool Delays

OpenAI's ChatGPT image-generation tool has been delayed due to capacity issues. The company's CEO, Sam Altman, announced that the delays will cause new product releases and service disruptions. Despite the challenges, OpenAI remains committed to improving its services.

Intel CEO Lip-Bu Tan Outlines Plans

At the Intel Vision conference, CEO Lip-Bu Tan announced plans to spin off non-core assets and launch new products. He also mentioned recruiting and retaining engineering talent as a priority. Tan became CEO on March 18 after Pat Gelsinger's departure.

OpenAI Accused of Training AI Models on Copyrighted Content

OpenAI, a leading artificial intelligence (AI) research organization, has been accused by the nonprofit AI Disclosures Project of training its AI models on copyrighted content without permission. The report, titled 'OpenAI Training Violations: O'Reilly Books,' claims that OpenAI's GPT-4 model was trained on nonpublic books, including works from authors such as J.K. Rowling and Stephen King.

OpenAI's ChatGPT Gains Rivals

OpenAI's ChatGPT may be the world's most popular chatbot app, but rival services are gaining traction. According to data from analytics firms Similarweb and Sensor Tower, Google's Gemini and Microsoft's Copilot have seen significant increases in usage.

Tinder Introduces AI Personas for Flirting Practice

Tinder has announced the launch of a new game powered by OpenAI, allowing users to interact with AI personas and practice flirting. The game, called 'The Game Game', features a deck of cards with different AI personas and scenarios, and provides real-time feedback on user performance. The company claims that the game is intended to provide a fun and lighthearted experience, not to be taken too seriously.

Beagle's Long-Range Drone for Energy Infrastructure Inspection

Beagle Systems has developed a long-range drone that can inspect energy infrastructure, such as pipelines and pylons. The company has raised €5 million in funding to accelerate growth and plans to use the technology for civilian applications.

Ponte Labor Makes Hiring Easy for Hispanic Immigrants

Ponte Labor, founded by former roommates and colleagues Lorenza and Stephanie, aims to help Hispanic immigrants in the US achieve their professional goals. The platform uses WhatsApp-based recruitment to connect job seekers with employers. With a focus on building deep trust within the community, Ponte Labor has seen strong traction since its pre-seed days.

Qualcomm Acquires VinAI Generative AI Division

Qualcomm has acquired the generative AI division of VinAI, an AI research company headquartered in Hanoi, for an undisclosed amount. The move marks Qualcomm's continued expansion into the AI tooling sector.

NaNoWriMo Shuts Down

NaNoWriMo, an annual writing challenge for novelists, has announced its shutdown due to financial struggles and controversy over the use of AI in creative writing. The organization faced backlash from authors who resigned from its board in response to concerns about their work being stolen to train AI models. Additionally, NaNoWriMo was criticized for inconsistent moderation on its forums, creating an unsafe environment for teenage writers.

Google Partners with Roblox for Immersive Ads

Google has partnered with gaming company Roblox to offer immersive ad formats, allowing marketers to reach the younger Gen Z audience. The partnership will allow advertisers to purchase and scale Roblox's Rewarded Video and other immersive ad formats.

Hacking Chinese Websites for $100,000 a Month?

A mysterious job offer is seeking webshell engineers to hack Chinese websites for up to $100,000 per month. The offer comes with a monthly salary of up to $100,000 and asks individuals to join a Telegram channel to learn more.

OpenSNP Shuts Down, Deletes All Data

OpenSNP, a large open source repository for user-uploaded genetic data, will shut down and delete all its data by the end of April. The decision comes after concerns over data privacy.

TikTok Shuts Down TikTok Notes

TikTok has announced that it is shutting down its Instagram competitor, TikTok Notes. The company will be directing users to ByteDance-owned Lemon8, which offers similar functionality and had around 12.5 million global monthly active users.

Meta's AI Research VP Joelle Pineau Leaves Company

Meta's VP of AI Research, Joelle Pineau, has announced her departure from the company. She will leave Meta in May after overseeing the FAIR lab for over two years. The move comes as Meta ramps up its AI efforts and plans to spend $65 billion on AI infrastructure in 2025.

Skylight: A TikTok Alternative Built on AT Protocol

Skylight, a startup that aims to take on TikTok with a more open alternative, is launching its mobile app to the public after just 10 weeks of active development. The app is built on top of the AT Protocol and offers many familiar features, including an in-app video editor, commenting, liking, sharing, setting up user profiles, and following others.