梵蒂冈的“Click to Pray”应用程序存在严重的安全漏洞，暴露了全球超过70万用户的个人数据。该漏洞由安全研究员BobDaHacker于2026年1月发现，攻击者可以通过一个未受保护的API未经授权访问用户的姓名、电子邮件地址和出生日期等信息。尽管尝试通知了该应用程序的开发者，但六个月内未采取任何行动，导致数据泄露持续发生。直到Dark Reading的一名记者报道了该问题后，该漏洞才得到修复。 AI
影响 对AI运营的直接影响很小；突显了普遍的应用程序安全风险。
排序理由 该集群描述的是一个特定应用程序的安全漏洞，而不是核心AI发布或重大的行业性事件。
在 Mastodon — mastodon.social 阅读 →
AI 生成摘要 · Google Gemini · 来自 2 个来源。 我们如何撰写摘要 →
An app linked to the Vatican with hundreds of thousands of users was found to have zero authentication and security. That means anyone can access its backend and siphon users' data, including names, email addresses, and birthdates. While the issue has since been resolved, it rema…
Security flaw in Vatican’s ‘Click to Pray’ app leaves over 700,000 global users exposed — app has been le… An app linked to the Vatican with hundreds of thousands of users was found to have zero authentication and security. That means anyone can access its backend and siphon user…