Naukri bug exposed recruiter email IDs via mobile apps: Report
A bug in
Naukri
.com's
mobile apps
exposed the email addresses of recruiters using the platform to hire talent, according to a report by TechCrunch. The vulnerability has since been fixed.
Security researcher
Lohith Gowda
, who discovered the issue, said it was caused by a flaw in the
API
used by Naukri's Android and iOS apps. The bug exposed recruiter email IDs when they viewed candidate profiles. The web version of Naukri.com was unaffected.
'The exposed recruiter email IDs can be used for targeted phishing attacks, and recruiters may receive excessive unsolicited emails and spam,' Gowda told TechCrunch.
by Taboola
by Taboola
Sponsored Links
Sponsored Links
Promoted Links
Promoted Links
You May Like
2025 Top Trending local enterprise accounting software [Click Here]
Esseps
Learn More
Undo
He also warned that the data could end up in public breach databases or spam lists, making it susceptible to bot abuse or scams.
A senior IT infrastructure executive at Naukri said the issue was resolved earlier this week and added that the company had 'detected no unusual activity that affects the integrity of user data'.
Live Events
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Time of India
3 hours ago
- Time of India
6 Awesome New Features Coming in Android 16!
/ Jun 22, 2025, 03:42PM IST Android 16 is officially here, and it's packed with updates designed to make your phone more personal, intelligent, and secure than ever before! In this video, we dive into 6 of the most exciting new user-facing features that will be rolling out to your Android device later this year. From major upgrades in Google Messages to a completely redesigned AI-powered photo editor and smarter home controls, find out everything you need to know about what's coming.
Time of India
4 hours ago
- Time of India
Elon Musk wants to retrain XAI's chatbot Grok to clear 'ChatGPT's woke' and .... Garbage
Representative Image Elon Musk the founder of xAI has said that he will retrain his artificial intelligence chatbot and ChatGPT rival Grok . Musk took to X (formerly known as Twitter) and shared a post stating that he will be removing what he terms "ChatGPT's woke" biases and other "garbage" from the foundational knowledge of Grok. Elon Musk to retrain chatbot Grok In a series of posts shared on X, Elon Musk announced that the upcoming version of Grok likely to be called as Grok 4 will trained on the revised information curated by Grok 3.5's advanced reasoning capabilities. 'We will use Grok 3.5… to rewrite the entire corpus of human knowledge, adding missing information and deleting errors,' Musk wrote, adding that current AI models are trained on 'far too much garbage'. This move from Elon Musk comes after his repeated criticism of rival AI model — ChatGPT. Musk has criticised ChatGPT for what he perceives as a "woke mind virus" or ideological slant in their responses. Musk has also asked the users to submit their 'divisive facts' which will be used in the retraining of Grok. 'Please reply to this post with divisive facts for @Grok training. By this I mean things that are politically incorrect, but nonetheless factually true', wrote Musk. by Taboola by Taboola Sponsored Links Sponsored Links Promoted Links Promoted Links You May Like Giao dịch vàng CFDs với mức chênh lệch giá thấp nhất IC Markets Đăng ký Undo Elon Musk's xAI issues clarification on Grok's responses on white genocide Recently, some X users reported that Grok repeatedly generated responses referring to the theory of "white genocide" in South Africa. Users who tagged @grok in posts about sports, entertainment, and general topics received replies discussing racial violence in South Africa, including references to the anti-apartheid chant 'Kill the Boer'. After this, Elon Musk's xAI issued a clarification for this incident. In a statement shared on X, xAI said that the modification in Grok violated the internal policies and core values, leading the chatbot to repeatedly reference politically sensitive topics. The company stated that the change was detected and reversed promptly, though it did not disclose who was responsible for the alteration.
Time of India
4 hours ago
- Time of India
RBI-led initiative to curb digital frauds gains momentum, banks roped in to set up DPIP
In a bid to rein in the increasing incidence of digital payment frauds , major public and private sector banks have been roped to develop Digital Payment Intelligence Platform (DPIP) as a Digital Public Infrastructure (DPI) under the supervision and guidance of the RBI . The proposed platform seeks to bolster fraud risk management by facilitating real-time intelligence sharing and gathering, thereby preventing fraudulent digital transactions, sources said. According to sources, the institutional structure of the proposed entity would be created with the help of both public sector and private sector lenders as fraud is a common monster. by Taboola by Taboola Sponsored Links Sponsored Links Promoted Links Promoted Links You May Like Play War Thunder now for free War Thunder Play Now Earlier this month, a high-level meeting in this regard was convened to finalise the structure of the platform where senior bank officials, RBI officials and other stakeholders were present. Since the issue is one of the top agenda for both the government and the Reserve Bank of India (RBI), sources said the platform should become operational in the next few months. Live Events Once operational, DPIP will collect and analyse data from various sources to identify potential threats and prevent fraudulent activities. By enabling real-time data sharing, the platform will help prevent scams and ensure secure transactions. Reserve Bank Innovation Hub (RBIH) has been assigned for building a prototype of DPIP in consultation with 5-10 banks. It is going to leverage advanced technologies to curb payment-related frauds. RBI, in June last year, formed a committee, chaired by A P Hota, former MD & CEO of NPCI , to examine various aspects of establishing this digital public infrastructure. According to the latest annual report of the RBI, there has been a significant surge in bank frauds, with the amount involved rising nearly three times to Rs 36,014 crore in FY25, compared to Rs 12,230 crore in the previous year. Of this, as much as Rs 25,667 crore worth of frauds were reported by public sector banks as against Rs 9,254 crore a year ago. Frauds have occurred predominantly in the category of digital payments (card/internet) in terms of the number and primarily in the loan portfolio (advances) in terms of value, it said. While card/internet frauds contributed maximum to the number of frauds reported by private sector banks, frauds in public sector banks were mainly in advances, it said.
