Replying to
@bagder@mastodon.social I'm pretty sure this is just a joke
Infosec, bug bounty, Linux
Saxonar GmbH, a German company that makes and sells cycling powermeters under the brand "power2max", says their webshop was breached on April 7.
Customer data (including "encrypted" passwords) was accessed and exfiltrated. Payment data was not affected.
Vibe-coded "social network for AI agents" Moltbook publicly exposed an API key granting full read/write access to the underlying database:
https://www.wiz.io/blog/exposed-moltbook-database-reveals-millions-of-api-keys