DevThe Registerabout 22 hours ago
Airport group exposed API keys for four years
3 min read
Manchester Airports Group exposed overprivileged Iterable API keys in client-side JavaScript from June 2022 to August 2026, enabling theft of 8.8 million customer records. Researcher Scott Helme confirmed FulcrumSec's claim, noting keys could delete data. MAG disputes the characterization.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
