- Cybernews discovered misconfigured database in “Video AI Artwork Generator & Maker” app
- Leak uncovered 8.27m media information, together with 2m non-public person photographs and movies
- Builders secured database after disclosure; comparable flaws seen in one other Codeway app
Yet one more misconfigured database leaking delicate person knowledge was discovered, however this one is much more worrying for the reason that knowledge being leaked is – user-uploaded photographs and movies.
Researchers from Cybernews just lately found an Android app referred to as “Video AI Artwork Generator & Maker” contained a misconfigured Google Cloud storage bucket which was accessible to anybody who knew the place to look.
In complete, greater than 1.5 million person pictures, and greater than 385,000 movies have been saved within the bucket. Moreover, it saved greater than 2.87 million AI-generated movies, greater than 386,000 AI-generated audio information, and greater than 2.87 million AI-generated pictures.
A number of weak apps
The app provided AI-generated makeovers for photographs and movies – one thing that’s significantly common lately. It was launched in mid-June 2023 and in response to Cybernews, has been storing the multimedia folks add since then.
So, in complete, the uncovered bucket contained 8.27 million media information, 2 million of which have been non-public, user-uploaded content material.
The app was allegedly developed by Codeway Dijital Hizmetler Anonim Sirketi, a non-public firm registered in Turkey, however we couldn’t discover this app on the Play Retailer, or the developer’s official web site. Codeway’s devoted Play Retailer web page exhibits solely three apps.
Nonetheless, the official web site does show a unique app, referred to as Chat & Ask AI, and this one additionally had a misconfigured backend utilizing Google Firebase. In early February 2026, an impartial researcher discovered that this app, one of the crucial common ones in its class, uncovered 300 million messages tied to 25 million customers.
Nonetheless, Cybernews stated it managed to get in contact with the builders, who secured the Video AI Artwork Generator & Maker database quickly after.
“This knowledge leak exhibits how some AI apps prioritize quick product supply, skipping essential safety features, equivalent to enabling authentication for the essential cloud storage bucket used to retailer person knowledge, together with pictures and movies,” the researchers defined.
The perfect antivirus for all budgets
Comply with TechRadar on Google Information and add us as a most popular supply to get our professional information, critiques, and opinion in your feeds. Ensure to click on the Comply with button!
And naturally you may also observe TechRadar on TikTok for information, critiques, unboxings in video kind, and get common updates from us on WhatsApp too.
:focal(1941x1109:1942x1110)/https://tf-cmsv2-smithsonianmag-media.s3.amazonaws.com/filer_public/3c/d2/3cd2b9a5-04c9-4389-86c6-98a166569bc1/4.jpg "Melting Mountain Ice Is Bringing Historical Secrets and techniques to the Floor. Archaeologists Are Racing to Discover the Artifacts Earlier than They’re Misplaced to Time")
Leave a Reply