Peloton

Okta confirms an attacker accessed an engineer's laptop in January consistent with posted screenshots by Lapsus$, as customers struggle to grasp their exposure

i.e. their data may have been viewed or acted upon. “We have identified those customers and already reached out directly by email.” https://www.okta.com/... Kevin Beaumont / @gossithedog : “We have no...

Researcher details a Peloton API bug that let anyone access private account info, which initially went unpatched until a reporter contacted Peloton

Researcher details a Peloton API bug that let anyone access private account info, which initially went unpatched until a reporter contacted Peloton

But the company won't say if it has evidence of malicious exploitation.  —  Halfway through my Monday afternoon workout last week …