POPULAR FITNESS APP FITIFY EXPOSES 138K USER PROGRESS PHOTOS

Summary from the TLDR InfoSec newsletter

Fitify, a popular fitness app, exposed 373,000 files, including 138,000 progress photos, via an unsecured Google Cloud storage bucket. Many of the photos showed users in minimal clothing, making the exposure highly sensitive. Additionally, private data was accessible without passwords or security keys, and the app contained hardcoded secrets that could have allowed attackers to access more user information.