Twitter alternative spouts a massive leak

Security consultant and Have I Been Pwned creator Troy Hunt has detailed a vulnerability in the API of Spoutible, a social platform that emerged following Elon Musk’s takeover of Twitter, that could allow hackers to take full control of users’ accounts.

After someone alerted Hunt to the vulnerability, he discovered that hackers could exploit Spoutible’s API to obtain a user’s name, username, and bio, along with their email, IP address, and phone number. …

accounts alex api consultant control elon elon musk hackers have i been pwned hunt leak musk platform pwned security security consultant social takeover the verge troy hunt twitter vulnerability