Data Security

Widely used AI-powered calorie tracking app Cal AI was purportedly breached by the threat actor "vibecodelegend," who leaked data from more than 3 million of the app's users allegedly obtained from a misconfigured Google Firebase instance, Cybernews reports.

Infosecurity Magazine reports that Elastic Cloud had a free trial of its security information and event management platform harnessed to store data pilfered from hundreds of systems as part of an attack campaign that involved the exploitation of various software flaws.

Cybernews reports that online gaming platform Roblox was noted by cybersecurity firm Brinztech to have a database with 50 million login records allegedly pilfered directly from its users peddled for $777 on the dark web.

The breach was discovered by the service provider on April 28, 2025, who subsequently notified the FBI and engaged cybersecurity experts.

DarkCloud, advertised as surveillance software, focuses on extracting credentials and sensitive data from infected machines.

The vulnerability stems from an unauthenticated "/api/backup" endpoint that allows attackers to request a full system backup.

The cyberattack, which occurred in August 2024, reportedly saw the theft of names, email addresses, home and mobile phone numbers, and physical addresses.