Smart device company Wyze has confirmed it accidentally exposed a database containing details from up to 2.4 million customers online.
The incident happened early in December, eventually being noticed by cybersecurity company Twelve Security at the end of the month, when it was reported by video surveillance news website IPVM.
According to Wyze, a budget vendor in smart devices such as cameras, locks, bulbs, and plugs, the database was a test environment for making information processing more efficient.
Data exposed
However, while Wyze said it was exposed in error, Twelve Security reported that details included email addresses, usernames, and security tokens - enough information for malicious third parties to take control over any smart devices affected.
Wyze has since reset its systems to help prevent that.
The problem arose when Wyze, using Amazon Web Services to process Internet of Things (IoT) data, left security protocols off that allowed their Elasticsearch data to be accessed online. It remains a reminder to businesses that they are ultimately responsible for security when it comes to cloud computing services.
However, this isn't the first time Wyze have run into problems with user access. Earlier this year a flaw in their system allowed users to still access smart cameras that had been reassigned to another account.
Via ZDnet
https://news.google.com/__i/rss/rd/articles/CBMiQ2h0dHBzOi8vd3d3LnRlY2hyYWRhci5jb20vbmV3cy93eXplLWV4cG9zZXMtY3VzdG9tZXItZGV0YWlscy1vbmxpbmXSAUdodHRwczovL3d3dy50ZWNocmFkYXIuY29tL2FtcC9uZXdzL3d5emUtZXhwb3Nlcy1jdXN0b21lci1kZXRhaWxzLW9ubGluZQ?oc=5
2019-12-30 10:49:00Z
CBMiQ2h0dHBzOi8vd3d3LnRlY2hyYWRhci5jb20vbmV3cy93eXplLWV4cG9zZXMtY3VzdG9tZXItZGV0YWlscy1vbmxpbmXSAUdodHRwczovL3d3dy50ZWNocmFkYXIuY29tL2FtcC9uZXdzL3d5emUtZXhwb3Nlcy1jdXN0b21lci1kZXRhaWxzLW9ubGluZQ
Tidak ada komentar:
Posting Komentar