CYBERNEWS – Salams, a Muslim-oriented dating app, failed to protect user data, leaving it vulnerable for 18 months. Cybernews researchers found an exposed .env file with sensitive credentials, accessible since Dec 2022. The breach risked personal information, including usernames, emails, and location data. Despite the discovery on Dec 8, 2023, the file was only secured on May 20, 2024, endangering Salams' 6M users. The app was previously known as Minder.
by Vilius Petkauskas
See full article at Cybernews
