ynet reported a severe security flaw in the Auto Depot retail chain's website that allowed easy download of some 600,000 invoices containing full names, addresses, ID numbers and the last digits of credit cards.

The flaw was uncovered by Security Joes researchers together with security researcher Lior Ben-David (LBD), who found that a simple access-control failure exposed the details of hundreds of thousands of citizens. The company and the Israel National Cyber Directorate were notified, and the flaw was fixed with no evidence of hostile exploitation.

🇮🇱 לקריאת הפוסט בעברית