seach-icon
  • user-img

    Sonal Shridhar Shinde in News

    10-Feb-2023 12:03 PM


    thumbnail

    Over 40 Lakh Mobile Users at Hacking Risk From Critical Security Flaw in Shopify API Keys

    Over 40 lakh mobile phone users' sensitive data is at hacking risk after cyber security researchers on Friday uncovered a critical security flaw in Shopify application programming interface (API) keys/tokens.
    From the millions of Android apps, 21 e-commerce apps were identified to have 22 hardcoded Shopify API keys/tokens, exposing personally identifiable information (PII) to potential threats.
    If an attacker gains access to the hardcoded key, they can use it to access sensitive data or perform actions on behalf of the program, even if they are not authorized to do so, said security researchers.
    Over 4.4 million websites from more than 175 countries globally use Shopify.
    With the ease of creating an online store, it also allows the integration of third-party apps and plugins to add additional functionality to the store.
    Source: Latestly.com