pen test partners
How did a rental startup I’d never heard of leak my home address?
I consider myself a fairly privacy-conscious person, going out of my way to evade online tracking and, for the most part, avoiding spam mail. But when I found myself staring at my home address on the
Fisher-Price’s Chatter phone has a simple but problematic Bluetooth bug
As nostalgia goes, the Fisher-Price Chatter phone doesn’t disappoint. The classic retro kids toy was given a modern revamp for the holiday season with the new release for adults which, unlike th
Security flaws found in popular EV chargers
U.K. cybersecurity company Pen Test Partners has identified several vulnerabilities in six home electric vehicle charging brands and a large public EV charging network. While the charger manufacturers
Peloton and Echelon profile photo metadata exposed riders’ real-world locations
Security researchers say at-home exercise giant Peloton and its closest rival Echelon were not stripping user-uploaded profile photos of their metadata, in some cases exposing users’ real-world
Echelon exposed riders’ account data, thanks to a leaky API
Peloton wasn’t the only at-home workout giant exposing private account data. Rival exercise giant Echelon also had a leaky API that let virtually anyone access riders’ account information.
Peloton’s leaky API let anyone grab riders’ private account data
Halfway through my Monday afternoon workout last week, I got a message from a security researcher with a screenshot of my Peloton account data. My Peloton profile is set to private and my friend’
Running apps still lag behind on privacy and security
Some of the most popular running apps are still lagging behind on security and privacy. That’s the verdict from security researchers who examined the leading running apps five years apart and fo
Security flaw left ‘smart’ chastity sex toy users at risk of permanent lock-in
Just because almost every gadget or appliance can be connected to the internet, doesn’t mean they should be. Outages can render these “smart” devices useless, and many use weak security
A SonicWall cloud bug exposed corporate networks to hackers
A newly discovered bug in a cloud system used to manage SonicWall firewalls could have allowed hackers to break into thousands of corporate networks. Enterprise firewalls and virtual private network a
Smartwatch hack could trick patients to ‘take pills’ with spoofed alerts
Vulnerabilities could have let hackers send medication reminders to patients as often as they wanted.
Cloud flaws expose millions of child-tracking smartwatches
Parents buy their children GPS-enabled smartwatches to keep track of them, but security flaws mean they’re not the only ones who can. This year alone, researchers have found several vulnerabilit
Group dating app 3Fun exposed sensitive data on 1.5 million users
More than 1.5 million users of a group dating service had their personal data exposed — including their real-time location — because of a vulnerability in the app. The dating site, 3Fun, bills its
‘World’s first Bluetooth hair straighteners’ can be easily hacked
Here’s a thing that should have never been a thing: Bluetooth-connected hair straighteners. Glamoriser, a U.K. firm that bills itself as the maker of the “world’s first Bluetooth hai
‘Unhackable’ encrypted flash drive eyeDisk is, as it happens, hackable
In security, nothing is “unhackable.” When it’s claimed, security researchers see nothing more than a challenge. Enter the latest findings from Pen Test Partners, a U.K.-based cybers