An AI Toy Exposed 50,000 Logs of Its Chats With Kids to Anyone With a Gmail Account
ID: aec2d81d-3d1c-5a48-abeb-0c0ad06d77f6
STIX ID: report--aec2d81d-3d1c-5a48-abeb-0c0ad06d77f6
Feed Name: WIRED Security
Threat Score
Researchers found that Bondu's public web console allowed any user authenticated with a Google account to view sensitive data from the company's smart-toy service, including names, birthdates, family-member names, parental objectives, and transcripts of more than 50,000 child-toy conversations; Bondu took the portal offline after notification and reinstated it with proper authentication and additional controls.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.