Page 4 - Test Partners News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Newly Patched Peloton API Flaws Exposed Users' Private Data May 20, 2021 Compliance HealthInfoSec) • May 6, 2021     Photo: Peloton Security researchers say API flaws could have exposed the private data of millions of Peloton fitness equipment online service users for months before they were recently patched. The vulnerability issues emerged the same week that Peloton announced the voluntary recalls of two of its treadmills due to serious safety concerns. In a blog posted Wednesday, security consultancy Pen Test Pa...

Thu, May 6th 2021 8:12pm — Timothy Geigner Peloton is, as they say, having a rough week. While the company has been something of a pop culture darling for several years, it also got a nice boost from this lovely COVID-19 pandemic we've all been suffering through for more than a year now. Still, no company gets through its full lifecycle unscathed and this week has been a week I'm certain the Peloton folks would love to forget. We'll get started with the less-Techdirt centric part of this, which is that Peloton recently had to recall two of its treadmills after it turns out those treadmills ...

A security researcher has discovered several issues with the software used by exercise equipment maker Peloton, which may have leaked sensitive customer information to unauthenticated users. Pen Test Partners explained in a new blog post that the problem could be traced back to unauthenticated API endpoints, which could have allowed hackers to interrogate  information on all users. Among the potentially exposed data was user and instructor IDs, group membership, location, workout stats, gender and age, and whether users are in the studio or not. “The mobile, web application and back-end A...

BBC News By Jane Wakefield image captionModems need crucial software updates and secure passwords Millions of people could be using outdated routers that put them at risk of being hacked, Which? has warned. The consumer watchdog examined 13 models provided to customers by internet-service companies such as EE, Sky and Virgin Media and found more than two-thirds had flaws. It estimated about six million people could have a device not updated since 2018 or earlier. So, in some cases, they would not have received crucial security updates. Weak passwords weak default passwords cyber-criminals cou...

© Getty Images Recently patched vulnerabilities in Peloton’s bike software may have allowed unauthorized users to view sensitive user data, new security research published this week found. Pen Test Partners, a cybersecurity group, said that earlier this year it discovered vulnerabilities allowing unauthenticated users to exploit Peloton’s API, the software that facilitates communication between the bikes and company servers. The vulnerabilities could potentially allow an individual to view personal information on Peloton users, including their location, gender and age, as well as class a...