Page 2 - Test Partners News Today

API vulnerability potentially left PII on DPD Group’s customers dangerously exposed, but was rapidly fixed on disclosure.

Anyone could scan the website's HTML code to reveal personal information belonging to users of the popular second-hand classified adverts website

Pen Test Partners says it disclosed the vulnerability in May 2020; Sky didn't release a full patch until October 2021.

Millions of Sky broadband users are now at risk of being hacked due to a security flaw that took 18 months to fix. Learn more about this vulnerability.

More than 200,000 BrewDog shareholders and customers had their details exposed for over 18 months, according to a security consulting and testing services firm.

Newly Patched Peloton API Flaws Exposed Users Private Data May 20, 2021 Compliance HealthInfoSec) • May 6, 2021     Photo: Peloton Security researchers say API flaws could have exposed the private data of millions of Peloton fitness equipment online service users for months before they were recently patched. The vulnerability issues emerged the same week that Peloton announced the voluntary recalls of two of its trea...

Thu, May 6th 2021 8:12pm — Timothy Geigner Peloton is, as they say, having a rough week. While the company has been something of a pop culture darling for several years, it also got a nice boost from this lovely COVID-19 pandemic weve all been suffering through for more than a year now. Still, no company gets through its full lifecycle unscathed and this week has been a week Im certain the Peloton folks would love to forget. Well get started with the less-Techdirt centric part of this, which ...

A security researcher has discovered several issues with the software used by exercise equipment maker Peloton, which may have leaked sensitive customer information to unauthenticated users. Pen Test Partners explained in a new blog post that the problem could be traced back to unauthenticated API endpoints, which could have allowed hackers to interrogate  information on all users. Among the potentially exposed data was user and instructor IDs, group membership, location, workout stats, gender...

BBC News By Jane Wakefield image captionModems need crucial software updates and secure passwords Millions of people could be using outdated routers that put them at risk of being hacked, Which? has warned. The consumer watchdog examined 13 models provided to customers by internet-service companies such as EE, Sky and Virgin Media and found more than two-thirds had flaws. It estimated about six million people could have a device not updated since 2018 or earlier. So, in some cases, they would n...

© Getty Images Recently patched vulnerabilities in Peloton’s bike software may have allowed unauthorized users to view sensitive user data, new security research published this week found. Pen Test Partners, a cybersecurity group, said that earlier this year it discovered vulnerabilities allowing unauthenticated users to exploit Peloton’s API, the software that facilitates communication between the bikes and company servers. The vulnerabilities could potentially allow an individual to view...