An anonymous reader quotes a report from TechCrunch: India’s largest bank has secured an unprotected server that allowed anyone to access financial information on millions of its customers, like bank balances and recent transactions. The server, hosted in a regional Mumbai-based data center, stored two months of data from SBI Quick, a text message and call-based system used to request basic information about their bank accounts by customers of the government-owned State Bank of India (SBI), the largest bank in the country and a highly ranked company in the Fortune 500. But the bank had not protected the server with a password, allowing anyone who knew where to look to access the data on millions of customers’ information.

The passwordless database allowed us to see all of the text messages going to customers in real time, including their phone numbers, bank balances and recent transactions. The database also contained the customer’s partial bank account number. Some would say when a check had been cashed, and many of the bank’s sent messages included a link to download SBI’s YONO app for internet banking. The bank sent out close to three million text messages on Monday alone. The database also had daily archives of millions of text messages each, going back to December, allowing anyone with access a detailed view into millions of customers’ finances. SBI claims more than 500 million customers across the globe with 740 million accounts.

Read more of this story at Slashdot.

Source: Slashdot – India’s Largest Bank SBI Leaked Account Data On Millions of Customers

A lawyer in Houston has filed a lawsuit against Apple over a security vulnerability that let people eavesdrop on iPhones using FaceTime. “His lawsuit, filed Monday in Harris County, Texas, alleges that Apple ‘failed to exercise reasonable care’ and that Apple ‘knew, or should have known, that its Product would cause unsolicited privacy breaches and eavesdropping,'” reports CNBC. “It alleged Apple did not adequately test its software and that Apple was ‘aware there was a high probability at least some consumers would suffer harm.'” From the report: The suit says that Williams was “undergoing a private deposition with a client when this defective product breached allowed for the recording” of the conversation. Williams claimed this caused “sustained permanent and continuous injuries, pain and suffering and emotional trauma that will continue into the future” and that Williams “lost ability to earn a living and will continued to be so in the future.” The lawsuit also says that iOS 12.1, the latest major release of the iPhone operating system, was defective and “unreasonable dangerous” and that Apple “failed to provide adequate warnings to avoid the substantial danger” posed by the security flaw. Williams is seeking compensatory and punitive damages as a result of the exploit.

Read more of this story at Slashdot.

Source: Slashdot – Lawyer Sues Apple Over FaceTime Eavesdrop Bug, Says It Let Someone Record a Sworn Testimony