More than 2,000 mobile applications with millions of downloads were leaking user data, InfoSecurity reports. The leak was attributed to a misconfiguration of backend Firebase cloud databases, per a study conducted by security vendor Check Point. Two of the apps included a South American e-commerce app with more than 10 million downloads that leaked API gateway credentials and API keys, and a logo design app, also with over 10 million downloads, that leaked 130,000 usernames, emails and passwords.
Full Story