Careless Errors in Hundreds of Apps Could Expose Troves of Data

Web: https://catless.ncl.ac.uk/Risks/33/44/#subj6.1

Researchers found that mobile applications contain keys that could provide
access to both user information and private files from unconnected apps.

Researchers from Broadcom's Symantec Threat Hunter team published findings
on Thursday about the prevalence of hard-coded authentication credentials
lurking in the cloud services that underlie hundreds of mainstream
apps. These login credentials are often meant to give the app access to a
single file or service, like a mechanism for an app to display public images
from a company's …

apps data