Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

<div class="KonaFilter image-container display-table"><div><div class="image on-image">Eric Risberg / AP Images</div></div></div><ul class="summary-list"><li><a href="https://www.businessinsider.com/category/fbi">FBI</a> files were left exposed in a massive data breach stemming from the Oklahoma government, a cybersecurity firm says.</li><li>The company, UpGuard, <a href="https://www.upguard.com/breaches/rsync-oklahoma-securities-commission">says it discovered</a> in December that the Oklahoma Department of Securities left millions of files unprotected on a public server.</li><li><a href="https://www.forbes.com/sites/thomasbrewster/2019/01/16/massive-oklahoma-government-data-leak-exposes-7-years-of-fbi-investigations/#14a9cd1a6e11">UpGuard's researchers called</a> the Oklahoma government's handling of the data breach "irresponsible."</li></ul>Millions of files pertaining to sensitive FBI investigations were left exposed on an unprotected internet server, cybersecurity researchers say.The data breach stems from an Oklahoma state-level agency, which failed to properly protect three terabytes of "all sorts of archive enforcement actions," <a href="https://www.forbes.com/sites/thomasbrewster/2019/01/16/massive-oklahoma-government-data-leak-exposes-7-years-of-fbi-investigations/#14a9cd1a6e11">Forbes reports</a>. The millions of files contained information from FBI case files dating back to 2012, including interviews, witness statements, and bank transaction histories.Additionally, the breach exposed email archives, thousands of social security numbers, and data all the way back to the 1980s, the cybersecurity company <a href="https://www.upguard.com/breaches/rsync-oklahoma-securities-commission">UpGuard wrote in a blog post</a>.Read more: <a href="https://www.businessinsider.com/collection-one-data-breach-email-passwords-2019-1" data-analytics-position="1" data-analytics-module="hero_tout">Nearly 773 million email accounts have been exposed in a massive data breach. Here's how to check if you were affected</a>UpGuard says it uncovered the breach back in December and notified the affected government agency, the Oklahoma securities department. The exposed data was stored on a state-agency server that wasn't properly secured with a password, meaning the information on it was accessible for anyone to see and download.Although the affected department did remove public access to the server in response, authorities failed to check whether exposed information had been downloaded or misused, UpGuard told Forbes."It represents a compromise of the entire integrity of the Oklahoma Department of Securities' network," UpGuard researcher Chris Vickery told Forbes. "It affects an entire state level agency … It's massively noteworthy."The Oklahoma securities department told Forbes the matter was "under investigation," but refused to comment any further.In a statement to Forbes, the FBI said: "Adhering to Department of Justice policy, the FBI neither confirms nor denies any investigation." <div class="margin-top"> <h3>NOW WATCH: <a href="https://www.businessinsider.com/apple-iphone-sales-slowed-stock-plunge-2019-1">How Apple went from a $1 trillion company to losing over 20% of its share price in 3 months</a></h3> <div> </div> </div>

Millions of files from the Oklahoma government, including details of FBI investigations, were left exposed in a massive data breach

A default permissions settings in <keyword id="3159217" type="General" weightage="20" keywordseo="microsoft-power-apps" source="Orion">Microsoft Power Apps</keyword> might have exposed data of <keyword id="11942257" type="General" weightage="20" keywordseo="38-million-users" source="Orion">38 million users</keyword> online, cyber security researchers reported. According to security research network <keyword id="4670261" type="General" weightage="20" keywordseo="upguard" source="Orion">UpGuard</keyword>, the types of data included personal information used for <keyword id="9148427" type="General" weightage="20" keywordseo="covid-19-contact-tracing" source="Orion">Covid-19 contact tracing</keyword>, vaccination appointments, social security numbers for job applicants, employee IDs, and millions of names and email addresses. UpGuard notified 47 entities of exposures involving personal information, including governmental bodies like Indiana, Maryland, and New York City, and private companies like <keyword id="88011" type="General" weightage="20" keywordseo="american-airlines" source="Orion">American Airlines</keyword>, J.B. Hunt, and <keyword id="10387" type="General" weightage="20" keywordseo="microsoft" source="Orion">Microsoft</keyword>, for a total of 38 million records across all portals. "The number of accounts exposing sensitive information, however, indicates that the risk of this feature -- the likelihood and impact of its misconfiguration -- has not been adequately appreciated," the UpGuard team said in a blog post. Microsoft Power Apps are a product for making "low code", cloud-hosted business intelligence apps. Power Apps portals are a way to create a public website to "give both internal and external users secure access to your data." Users can create websites in the Power Apps UI with application capabilities like user authentication, forms for users to enter data, data transformation logic, storage of structured data, and APIs to retrieve that data by other applications. "Our conversations with the entities we notified suggested the same conclusion: multiple governmental bodies reported performing security reviews of their apps without identifying this issue, presumably because it has never been adequately publicised as a data security concern before," they added. There is, however, no evidence that the data has been exploited. On May 24, an UpGuard analyst first discovered that the OData API for a Power Apps portal had anonymously accessible list data including personally identifiable information. The owner of that application was notified and the data secured. "That case led to the question of whether there were other portals with the same situation -- the combination of configurations allowing lists to be accessed anonymously via OData feed APIs, and sensitive data collected and stored by the apps," the team noted. As reported by Wired, Microsoft has now changed the default permissions settings responsible for the exposure. SEE ALSO <a href="https://www.businessinsider.in/science/health/news/cadila-healthcare-to-launch-zycov-d-vaccine-for-12-year-old-and-above/articleshow/85564761.cms">Cadila Healthcare’s ZyCoV-D — This is what makes it different from other COVID-19 vaccines</a> <a href="https://www.businessinsider.in/business/startups/news/paytm-ipo-delhi-court-asks-local-police-to-conclude-investigation-on-allegations-raised-by-former-one97-communications/articleshow/85564575.cms">Paytm IPO: Delhi court asks local police to conclude its investigation in three weeks</a>

Default settings in Microsoft tool exposes 38 million users’ personal data, says report

<div class="KonaFilter image-container display-table"><div><div class="image on-image">AP Photo/Andrew HarnikFacebook CEO Mark Zuckerberg takes a drink of water as he testifies before a House Energy and Commerce hearing on Capitol Hill in Washington, Wednesday, April 11, 2018, about the use of Facebook data to target American voters in the 2016 election and data privacy.</div></div></div><ul class="summary-list"><li>Data on more than 540 million Facebook users was left exposed on public servers by app developers.</li><li>The social network's lax data policies meant that for years developers could easily harvest users' sensitive data - and now it's leaking out.</li><li>Facebook has since tightened up the data the user data accessible to app developers, especially in the wake of the Cambridge Analytica scandal, but at least some damage has already been done.</li><li>"Data about Facebook users has been spread far beyond the bounds of what Facebook can control today," said UpGuard, the security firm that found the leak.</li></ul>More than 500 million Facebook users' personal data was left exposed on public servers by app developers.<a href="https://www.upguard.com/breaches/facebook-user-data-leak">Researchers at security firm UpGuard found that the user data</a>, which had been harvested from Facebook by third-party app developers, was sitting without any password protection on public Amazon servers it had been uploaded to. That data included sensitive information like users' friends, likes, music, photos, events, interests, and check-ins. <a href="https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers-ju1hde0w?srnd=premium">UpGuard's findings were first reported by Bloomberg</a>.The vast majority of the records - 540 million users' info - had apparently been uploaded publicly by Cultura Cultiva, a Mexican media company. A second unprotected user data was far smaller, at around 22,000 users, and related to a Facebook-integrated app called "At the Pool" which shut down in 2014.The findings highlight how Facebook's years of lax oversight over how app developers could access user data has led to a massive proliferation of people's sensitive information across the internet, often without their knowledge or informed consent. Facebook has since tightened up the data the user data accessible to app developers, especially in the wake of the Cambridge Analytica scandal, but at least some damage has already been done."As Facebook faces scrutiny over its data stewardship practices, they have made efforts to reduce third party access. But as these exposures show, the data genie cannot be put back in the bottle," <a href="https://www.upguard.com/breaches/facebook-user-data-leak">UpGuard wrote in a blog post about its findings on Wednesday</a>. "Data about Facebook users has been spread far beyond the bounds of what Facebook can control today. Combine that plenitude of personal data with storage technologies that are often mis-configured for public access, and the result is a long tail of data about Facebook users that continues to leak," it writes.A Facebook spokesperson did not immediately respond to Business Insider's request for comment.Got a tip? Contact this reporter via encrypted messaging app Signal at +1 (650) 636-6268 using a non-work phone, email at rprice@businessinsider.com, Telegram or WeChat at robaeprice, or Twitter DM at <a href="https://twitter.com/robaeprice">@robaeprice</a>. (PR pitches by email only, please.) You can also <a href="https://www.businessinsider.com/how-to-tip-business-insider-securely-guide-signal-securedrop-2017-6">contact Business Insider securely via SecureDrop</a>.<h3>Read more:</h3><ul><li><a href="https://www.businessinsider.com/inside-facebook-physical-security-protect-mark-zuckerberg-employees-2019-2">Car-bomb fears and stolen prototypes: Inside Facebook's efforts to protect its 80,000 workers around the globe</a></li><li><a href="https://www.businessinsider.com/facebook-kills-building-8-portal-facebook-reality-labs-2018-12">Facebook quietly killed its Building 8 skunkworks unit as it reshuffles its cutting-edge experiments and hardware</a></li><li><a href="https://www.businessinsider.com/a16z-data-startup-executives-salary-equity-bonus-pay-2018-9">Leaked Andreessen Horowitz data reveals how much Silicon Valley startup execs really get paid, from CEOs to Sales VPs</a></li></ul> <div class="margin-top"> <h3>NOW WATCH: <a href="https://www.businessinsider.com/everyday-phrases-smart-people-say-incorrectly-statute-2015-10">12 everyday phrases that you're probably saying incorrectly</a></h3> <div> </div> </div>

540 million Facebook users had sensitive personal data left exposed by app developers

Sean Gallup/Getty ImagesA data-analytics firm hired by the Republican National Committee last year to gather political information about US voters <a href="http://gizmodo.com/gop-data-firm-accidentally-leaks-personal-details-of-ne-1796211612" target="_blank" rel="noopener noreferrer">accidentally leaked</a> the sensitive personal details of roughly 198 million citizens earlier this month. And it's now facing its first class-action lawsuit.Deep Root Analytics, a data firm contracted by the RNC, <a href="http://www.businessinsider.com/deep-root-leaks-voter-data-russia-2017-6" target="_blank" rel="noopener noreferrer">stored details</a> of about 61% of the US population on an Amazon cloud server without password protection for roughly two weeks before it was discovered by security researcher Chris Vickery on June 12. The class-action lawsuit, filed by James and Linda McAleer of Florida and all others similarly situated, alleges Deep Root failed to "secure and safeguard the public's personally identifiable information such as names, addresses, email addresses, telephone numbers, dates of birth, reddit.com browsing history, and voter ID number, which Deep Root collected from many sources, including the Republican National Committee."The data exposed by Deep Root included 1.1 terabytes "of entirely unsecured personal information" compiled by Deep Root and at least two other Republican contractors, TargetPoint Consulting, Inc., and Data Trust, according to an analysis from the cybersecurity firm UpGuard. "In total, the personal information of potentially near all of America's 200 million registered voters was exposed, including names, dates of birth, home addresses, phone numbers, and voter registration details, as well as data described as 'modeled' voter ethnicities and religions," UpGuard said.The lawsuit says that President Donald Trump "is on record denouncing these sorts of breaches as 'gross negligence.'" It says that "as a direct and proximite cause of Deep Root's conduct," those exposed in the data breach may be vulnerable to identity theft and "a loss of privacy," and argue that the "actual damages" exceed $5 million.The exposed information did not include highly sensitive information like Social Security numbers, and much of it was publicly available voter-registration data provided by state government officials, a company spokesman told Business Insider on Tuesday."Since this event has come to our attention, we have updated the access settings and put protocols in place to prevent further access," Deep Root said in a statement. "We take full responsibility for this situation."Deep Root didn't immediately respond to a request for comment Wednesday.But the exposed database combined people's personal information and political inclinations - including proprietary information gathered via predictive modeling tools - to create a detailed profile of nearly 200 million Americans that would be a "gold mine" for anyone looking to target and manipulate voters, said Archie Agarwal, the founder of the cybersecurity firm ThreatModeler."This is the mother lode of all leaks," Agarwal said Monday. "Governments are made or broken on this. I don't even have the words to describe it."Joe Loomis, the founder and chief technology officer at the cybersecurity firm CyberSponse, predicted that a series of lawsuits against Deep Root over the accidental leak would prove damaging."Even if it was human error and not intentional, one IT person is probably going to put this company out of business," he said. <h3>NOW WATCH: <a href="http://www.businessinsider.com/kellyanne-conway-gma-trump-believes-climate-change-is-a-hoax-paris-accord-global-warming-2017-6">'I'll ask it one more time': Kellyanne Conway won't say whether Trump thinks climate change is a hoax</a></h3> Please enable Javascript to watch this video

GOP data firm that exposed millions of Americans' personal information is facing its first class-action lawsuit

Pool/Getty ImagesA data analytics firm hired by the Republican National Committee last year to gather political information about US voters <a href="http://gizmodo.com/gop-data-firm-accidentally-leaks-personal-details-of-ne-1796211612" target="_blank" rel="noopener noreferrer">accidentally leaked</a> the sensitive personal details of roughly 198 million US citizens earlier this month, as its database was left exposed on the open web for nearly two weeks.Deep Root Analytics, a conservative data firm contracted by the RNC as part of a push to ramp up its voter analytics operation in the wake of Mitt Romney's defeat in the 2012 presidential election, stored details about approximately 61% of the US population on an Amazon cloud server without password protection for those two weeks.Gizmodo first reported the leak, which was discovered by <a href="https://www.upguard.com/breaches/the-rnc-files" target="_blank" rel="noopener noreferrer">UpGuard</a> cyber risk analyst Chris Vickery. "I find data breach situations like this all day long, every day," Vickery told Business Insider on Monday. "Companies don't realize their employees are cutting corners, and mistakes get made. It's an absolute epidemic."The data, according to UpGuard's analysis, "included 1.1 terabytes of entirely unsecured personal information compiled by Deep Root Analytics and at least two other Republican contractors, TargetPoint Consulting, Inc. and Data Trust. In total, the personal information of potentially near all of America's 200 million registered voters was exposed, including names, dates of birth, home addresses, phone numbers, and voter registration details, as well as data described as 'modeled' voter ethnicities and religions."The information did not include highly sensitive information like Social Security numbers, and much of it was publicly available voter-registration data provided by state government officials, a company spokesman told Business Insider on Tuesday."Since this event has come to our attention, we have updated the access settings and put protocols in place to prevent further access," Deep Root said in a statement. "We take full responsibility for this situation."But the exposed database combined individuals' personal information and political inclinations - including proprietary information gathered via predictive modeling tools - to create a detailed profile of nearly 200 million Americans that would be a "gold mine" for anyone looking to target and manipulate US voters, said Archie Agarwal, founder of the cybersecurity firm ThreatModeler."This is the mother lode of all leaks," Agarwal said Monday. "Governments are made or broken on this. I don't even have the words to describe it."<h2>'This is what you can use to steal an election'</h2>Deep Root emphasized in its statement that the data that was accessed "was, to the best of our knowledge, proprietary information as well as voter data that is publicly available and readily provided by state government offices."But Agarwal said data like Deep Root's is extremely valuable to adversaries who could use it to better understand what makes American voters tick, allowing nefarious actors to better coordinate their efforts to sway public opinion - efforts that could be particularly consequential in the kind of key swing states that proved crucial to President Donald Trump's election victory. "If the Russians have this data, then they have targeted information that could allow them to try to swing the vote," Agarwal said. "There is nothing more valuable to some people out there than this kind of information," Upguard's Vickery added. "This is what you can use to steal an election at the state and local level. It tells you who you need to advertise to to swing votes."Cybersecurity experts who spoke to Business Insider all said Deep Root's mistake - which made these sensitive voter data files available to anyone who found the URL to the cloud server - is common and easy to make.But while "it's not hard to make this mistake, but it's also hard not to check that it's been made," Vickery said. Thomson ReutersRussian President Putin speaks to journalists following a live nationwide broadcast call-in in MoscowJoseph Lorenzo Hall, the chief technologist at the Center for Democracy and Technology, said the voter information would be worth "a s---load of money" to anyone on the black market - particularly a hacker working on behalf of a foreign adversary - who happened upon it. "Certainly you can imagine that it could have been a covert way of communicating data in a way that looked like an error," Hall said. A senior GOP strategist who worked on the RNC's digital operations last year denied that anything nefarious had occurred, calling Deep Root "the best in the business" and arguing that, if anything, the exposure shows how far the party had come in developing a sophisticated operation that far surpassed that of Democrats."It's silly of Deep Root to have let that happen," the strategist said. "But I think that, overall, this story is a positive and shows that Republicans are ahead of democrats."<h2>'It's a little fishy'</h2>The data exposure comes as congressional and federal investigators examine Russia's interference in the 2016 election, part of which was aimed at gaining access to voter registration data and election systems in at least 39 states, <a href="https://www.bloomberg.com/politics/articles/2017-06-13/russian-breach-of-39-states-threatens-future-u-s-elections" target="_blank" rel="noopener noreferrer">Bloomberg reported</a> last week. "In Illinois, investigators found evidence that cyber intruders tried to delete or alter voter data," Bloomberg said. "The hackers accessed software designed to be used by poll workers on Election Day, and in at least one state accessed a campaign finance database." In Illinois, the Russians appeared to be rummaging for sensitive information on voters. Hackers gained access to the state's voter database, which contained information such as names, birth dates, driver's licenses and partial Social Security numbers on 15 million people, according to Bloomberg."It's a little fishy," said Joe Loomis, the founder and Chief Technology Officer at the cybersecurity firm CyberSponse. "Especially considering that it was a leak of all of this voter data as we hear that there were these other entities gaining access to voter registration" databases, he said. "Even if it was human error and not intentional, one IT person is probably going to put this company out of business," Loomis said, pointing to lawsuits that may be brought against the company by those who had their information exposed. Alex McGeorge, a senior security researcher at the cybersecurity firm Immunity, Inc., agreed that the leak was likely a "careless" mistake. "It was negligent," he said. "But now we have to take their word for it that no one got access to it" while it was online.Deep Root said the information had been online for 12 days and that there was no indication anyone - besides Vickery, who first discovered the database - gained access to it. But Vickery said he thinks the database "was probably left up for a lot longer" than 12 days, and noted that Deep Root said initially that someone had gained "unauthorized access" to the information while it was live."Since then they've changed their tune," Vickery said. REUTERS/Kevin LamarqueSen. Mark Warner on Capitol Hill.Deep Root said it didn't believe its systems had been hacked "based on the information we have gathered thus far."Agarwal, however, said that assessment could change as the company investigates the breach further."They are saying that based on whatever they think today, at this moment," Agarwal said. But the scope of data breaches is often not known until weeks, if not months, after they occurred. Vickery and McGeorge said the data exposed in the Deep Root leak was likely the kind of information that the Russians already had access to. But the extent of Russia's infiltration in election systems across the country last year remains unclear, and congressional investigators are apparently trying to find out more about what the Russians accessed and why."While I am not aware of evidence that the 2016 voting process itself was subjected to manipulation, and have no reason to doubt the validity of the election results, we know that the DHS and FBI have confirmed two intrusions into voter registration databases in Arizona and Illinois by foreign-based hackers," Sen. Mark Warner, the vice chairman of the Senate Intelligence Committee, wrote in a letter to Homeland Security Secretary John Kelly on Tuesday.Warner asked Kelly "to work closely with state and local election officials to disclose publicly which states were targeted, to ensure that they are fully aware of the threat, and to make certain that their cyber defenses are able to neutralize this danger. We are not made safer by keeping the scope and breadth of these attacks secret." The exposure of voter registration information, whether through leaks or hacks, has left upcoming elections vulnerable to manipulation. Virginia and New Jersey will hold gubernatorial elections later this year, and all 435 seats in the House and 33 of the 100 seats in the Senate will be contested in the 2018 midterm elections. "It is clear that these will not be the last attempts that we will see," Warner wrote, "and the next electoral cycle in 2018 will provide further targets for hackers." <h3>NOW WATCH: <a href="http://www.businessinsider.com/jared-kushner-spoke-first-time-since-being-appointed-trump-administration-president-2017-6">Watch Jared Kushner speak publicly for the first time since joining Trump's administration</a></h3> Please enable Javascript to watch this video

'The mother lode of all leaks': A massive data breach exposed 'information that can be used to steal an election'

<div class="KonaFilter image-container display-table"><div><div class="image on-image">Justin Sullivan/GettyFacebook CEO Mark Zuckerberg at the firm's annual developer conference.</div></div></div><ul><li>There are new details of the secretive new terms Facebook is asking developers to sign before they can run apps on the social network.</li><li>The new terms are designed to help Facebook police what data developers use and to prevent a second Cambridge Analytica.</li><li>Facebook is trying to be more transparent but it isn't publishing these new developer terms openly.</li><li>This makes it hard to see how Facebook might prevent further abuse of its platform.</li></ul> Facebook has <a href="http://uk.businessinsider.com/facebook-api-changes-limited-access-user-data-2018-4">talked about restricting developer access to its platform</a> in the wake of Cambridge Analytica, but we haven't heard much about how exactly the company might actually prevent a repeat of the scandal.Earlier this year, <a href="https://newsroom.fb.com/news/2018/04/restricting-data-access/">Facebook CTO Mike Schroepfer said developers would need permission</a> before running certain types of app on the platform. That's particularly if they needed access to certain types of data, such as Facebook Pages. Schroepfer didn't go into further detail about what that permission might look like.Now Business Insider understands that Facebook has introduced secretive "supplemental terms" that go far beyond what developers previously agreed to when it came to building apps. These terms are in addition to the public policies on Facebook's developer site, but they are not publicly available and developers who sign them are under a strict non-disclosure agreement.The new terms are designed to help the social network police what data developers are using, and prevent the kind of abuse that led to the Cambridge Analytica scandal.Specifically, Business Insider understands the policies give Facebook explicit permission to audit what information developers are using, their processes, and controls. They also state that the developer's terms can't contradict Facebook's own policies, and require that an app's data security safeguards are up to scratch.Facebook did not comment on the terms, but <a href="https://developers.facebook.com/docs/apps/review#supplemental-terms">pointed to a short explanation of the supplemental terms</a> on its developer website.These updates are significant because of the way the Cambridge Analytica scandal turned on one academic, Aleksandr Kogan, breaking Facebook's terms of service by <a href="https://www.theguardian.com/news/2018/mar/17/cambridge-analytica-facebook-influence-us-election">building an app that harvested and sold millions</a> of social network profiles.Kogan told British politicians that his app <a href="https://techcrunch.com/2018/04/24/kogan-i-dont-think-facebook-has-a-developer-policy-that-is-valid/">explicitly stated that it would "transfer and sell data"</a>, and said Facebook didn't notice this contradicted its terms. And <a href="http://uk.businessinsider.com/sandy-parakilas-facebook-cambridge-analytica-scandal-2018-3">according to former Facebook employee Sandy Parakilas</a>, Facebook didn't have the safeguards in place to prevent developers from siphoning off data.The new terms look like an attempt to sew up those loopholes.Facebook is generally on a push to be more transparent after the Cambridge Analytica scandal, but the secrecy around the supplemental terms makes it hard to see how the firm will really audit developers' use of people's data.Chris Vickery, a security expert with UpGuard, is sceptical that the new terms will give much protection.He told Business Insider: "If they do pick up someone that is suspicious, how are they going to audit their systems? Someone can take the data they've vacuumed up, stick on a USB stick, and then put it under their couch... There's no way Facebook can be sure."And if Facebook does find evidence of data that shouldn't have been collected, how will they guarantee it's been deleted? Maybe [the developer] copied and shared it. Facebook has no control over that whatsoever." <div class="margin-top"> <h3>NOW WATCH: <a href="http://www.businessinsider.com/celluveyor-conveyor-belt-move-direction-packages-warehouses-factories-2018-6">This conveyor belt can move in any direction</a></h3> <div> </div> </div>

Facebook introduced secretive new developer terms to prevent another Cambridge Analytica

<div class="KonaFilter image-container display-table float_right"><div><div class="image on-image">Jeff Chiu/APThe disgraced founder of Theranos, Elizabeth Holmes.</div></div></div>Good morning! This is the tech news you need to know this Thursday.<ol><li><a href="https://www.businessinsider.com/540-million-facebook-users-data-exposed-public-amazon-servers-upguard-2019-4?r=US&amp;IR=T">More than 500 million Facebook users' personal data was left exposed on public servers by app developers</a>. Researchers at security firm UpGuard found that the user data, which had been harvested from Facebook by third-party app developers, was sitting without any password protection on public Amazon servers it had been uploaded to.</li><li><a href="https://www.businessinsider.com/verizon-5g-smartphone-network-activated-works-with-moto-z3-and-5g-mod-2019-4">Ve</a><a href="https://www.businessinsider.com/verizon-5g-smartphone-network-activated-works-with-moto-z3-and-5g-mod-2019-4">rizon on Wednesday turned on its mobile 5G network, promising significantly faster speeds than the 4G LTE networks people have been using so far</a>. For now, only one phone can connect to Verizon's 5G network: the Motorola Moto Z3, which needs a "Moto Mod" attachment to connect to it.</li><li><a href="https://www.businessinsider.com/apple-airpods-2-vs-powerbeats-pro-2019-4?r=US&amp;IR=T">Coming on the heels of Apple's second-generation AirPods announcement, Beats has announced a new pair of wireless earbuds, the $250 Powerbeats Pro</a>. And while the two headphones bear some similarities, the pricier Powerbeats are a more premium choice that have more to offer when it comes to custom fitting options and audio quality.</li><li><a href="https://www.businessinsider.com/linus-torvalds-says-twitter-facebook-instagram-a-disease-2019-4?r=US&amp;IR=T">Linus Torvalds, who created the Linux operating system, said he detests social media, including the platforms Twitter, Facebook, and Instagram</a>. "I absolutely detest modern 'social media' - Twitter, Facebook, Instagram. It's a disease. It seems to encourage bad behavior," Torvalds said in an interview.</li><li><a href="https://www.businessinsider.com/wework-acquires-managed-by-q-2019-4?r=US&amp;IR=T">WeWork has acquired Managed by Q, a platform for office tenants to hire on-demand service workers for office-management tasks like cleaning or staffing reception desks</a>. Managed by Q was most recently valued at $249 million in a financing round in January and had raised $85 million since 2014, The Wall Street Journal reported.</li><li><a href="https://www.businessinsider.com/facebook-daily-telegraph-positive-sponsored-news-stories-2019-4?r=US&amp;IR=T">Facebook is paying The Daily Telegraph to run a series of positive sponsored stories about it</a>. The British newspaper is running dozens of stories that defend Facebook on controversial subjects like terrorism, hate speech, and cyber-bullying.</li><li><a href="https://www.businessinsider.com/softbank-leads-50-million-round-into-onfido-2019-4?r=US&amp;IR=T">British AI startup Onfido raised $50 million led by SBI Holdings, an early spinoff from SoftBank</a>. Onfido uses artificial intelligence to scan official documents such as drivers' licences and passports to confirm people's identities.</li><li><a href="https://www.businessinsider.com/tesla-q1-2019-production-and-delivery-numbers-2019-4?r=US&amp;IR=T">Tesla produced 77,100 vehicles in the first quarter of 2019, the company said on Wednesday</a>. Analysts polled by Bloomberg were expecting total production to be 64,400 vehicles.</li><li><a href="https://www.businessinsider.com/theranos-whistleblowers-launch-company-to-help-startups-avoid-mistakes-2019-4?r=US&amp;IR=T">Two Theranos whistleblowers created a company to help tech startups avoid making mistakes and becoming the next Theranos</a>. Erika Cheung and Tyler Shultz have launched an organization that teaches ethical practices and decision-making to entrepreneurs building their own companies.</li><li><a href="https://www.businessinsider.com/apple-watch-battery-lawsuit-screen-2019-4?r=US&amp;IR=T">Apple is being sued over allegations of a defect in the Apple Watch Series 3 that causes the battery to swell and the screen to potentially pop off the watch's main body or crack</a>. A woman says that Apple declined to replace her Apple Watch Series 3 under warranty after she experienced this problem, and instead quoted her an out-of-warranty repair price of $229.</li></ol>Have an Amazon Alexa device? Now you can hear 10 Things in Tech each morning. Just search for "Business Insider" in your Alexa's flash briefing settings. <div class="margin-top"> <h3>NOW WATCH: <a href="https://www.businessinsider.com/pi-day-math-important-eugenia-cheng-2017-3">A mathematician gave us the easiest explanation of pi and why it's so important</a></h3> <div> </div> </div>

10 things in tech you need to know today

<ul><li>Facebook changed its APIs but some app developers continued to retain sensitive user data more than a year after Cambridge Analytica. </li><li>Around 100 of Facebook’s partners still had access to details like user names and profile pictures within a Facebook group. </li><li>At 11 of these partners was accessed group member information within the last 60 days. </li><li>Facebook says that it has since removed access for all concerned parties. </li></ul>Data from Facebook continues to leak more than year after the Cambridge Analytica scandal. The social networking giant said that some apps continued to retain access to user profile pictures and identities even after new regulations were rolled out last year. "We know at least 11 partners accessed group members’ information in the last 60 days," said Facebook in its <a href="https://developers.facebook.com/blog/post/2019/11/05/changes-groups-api-access/">blog post</a>, adding that there was no evidence that this information was abused. The question of consent After news of <a href="https://www.businessinsider.in/everyone-is-talking-about-cambridge-analytica-the-trump-linked-data-firm-that-harvested-50-million-facebook-profiles-heres-whats-going-on/amp_articleshow/63369055.cms">Cambridge Analytica</a> broke, Facebook made changes to a lot of its developer APIs, including the Groups API — the interface between app developers and Facebook that can integrate with a group. The changes meant that app developers would only have access to the group’s name, the number of users and content of the posts. In order to attain additional details like names and profile pictures, group members would have to give their consent. This was in <a href="https://developers.facebook.com/blog/post/2018/04/04/facebook-api-platform-product-changes/">April 2018</a>. More than a year later, at least 100 of Facebook’s partners still had access to group member information. The company claims to have removed their access now. Even though Facebook did not specify which apps still had access, it did disclose that they were mostly ‘social media management and video streaming apps’. Fallout from Cambridge Analytica continues In 2018, whistleblower Christopher Wylie revealed that Cambridge Analytica used data from Facebook to harvest to data of 50 million users without their consent. According to Wylie, the data revealed personal information about the users. This information was then used to build psychological profiles to target users with political campaigns. The reforms to Facebook’s data sharing practices were only made after Mark Zuckerberg, Facebook CEO, pledged to change regulations after a public outcry. "We have a responsibility to protect your data, and if we can't then we don't deserve to serve you," said Zuckerberg in a statement in March 2018. Despite this, this is not the first time that Facebook’s been caught in a data breach after Cambridge Analytica. Facebook’s many data breaches In March this year, Facebook admitted to exposing user passwords on internal data servers. This meant that employees at Facebook could look up any user’s password which is a breach of privacy. In April, security researchers found that more than 540 million Facebook user records were exposed on Amazon’s cloud servers. According to UpGuard, the social networking platform was hacked by Cultura Colectiva with exposed 145 GB worth of data from Facebook. A couple of days later, Business Insider revealed that Facebook had ‘unintentionally uploaded’ contacts of 1.5 million people without their consent. WhatsApp, which is owned by Facebook, was hacked in May by an Israeli security firm, the NSO Group. It allegedly infected 1,400 users with flagship spyware, Pegasus. Facebook seems to be caught in a never-ending PR nightmare. It has been accused of data trading, data harvesting, and leaking user information. Government all over the world are mulling over whether regulation is enough to keep applications like Facebook in check when misuse has gotten out of hand.

You Searched For "upguard" and got 8 results

Millions of files from the Oklahoma government, including details of FBI investigations, were left exposed in a massive data breach

Paige Leskin

Default settings in Microsoft tool exposes 38 million users’ personal data, says report

IANS

540 million Facebook users had sensitive personal data left exposed by app developers

Rob Price

GOP data firm that exposed millions of Americans' personal information is facing its first class-action lawsuit

Natasha Bertrand

'The mother lode of all leaks': A massive data breach exposed 'information that can be used to steal an election'

Natasha Bertrand

Facebook introduced secretive new developer terms to prevent another Cambridge Analytica

Shona Ghosh

10 things in tech you need to know today

Shona Ghosh

Facebook data breach continues more than a year after Cambridge Analytica

Prabhjote Gill

Popular Keywords

Buying Guides