Researchers at Jamf Threat Labs discovered two mobile apps leaking sensitive user data over unencrypted HTTP requests. The affected apps, from a Malaysian healthcare platform and an Indian jewelry retailer, pose serious risks for exposed personal and healthcare information. #KhazanaJewellery #MiCareHealthTech
Keypoints
- Both apps leak unencrypted user data during login, making information vulnerable on public Wi-Fi networks.
- Khazana Jewellery’s iOS app exposes personal details including email, password, full name, and phone number.
- MiCare’s legacy app leaks sensitive healthcare data such as national ID, insurance policies, and device specifications.
- The vulnerabilities could allow attackers to hijack accounts, steal identities, and misuse healthcare data.
- Updated versions of the apps are not affected, but the legacy platforms remain a significant security risk.
Read More: https://securityonline.info/warning-popular-apps-leaking-your-private-data/