Two apps from developer Codeway on the Google Play Store have leaked 12TB of user data, including over 1.5 million images, after a misconfigured cloud storage setup. The apps, including the Video AI Art Generator, collected 8.27 million files since June 2023, exposing sensitive KYC details from the IDMerit app. Researchers found 72% of analyzed apps have similar vulnerabilities stemming from hardcoded secrets in their code, raising urgent security concerns.
Two apps from developer Codeway on the Google Play Store have leaked 12TB of user data, including over 1.5 million images, after a misconfigured cloud storage setup. The apps, including the Video AI Art Generator, collected 8.27 million files since June 2023, exposing sensitive KYC details from the IDMerit app. Researchers found 72% of analyzed apps have similar vulnerabilities stemming from hardcoded secrets in their code, raising urgent security concerns.