Duolingo data could translate to a cyber criminal gold mine
Popular language learning app Duolingo saw a bug exploited that resulted in a compilation of account information from over 2.6 million users. According to VX-Underground, the largest collection of malware source code, samples, and papers on the internet, “sending a valid email to the API returns generic account information on the user (name, email, languages studied).” The data collected will be used for Doxxing.
Grip Security Raises $41 Million
The series B funding brought the startup’s total funding amount to $66 million. Third Point Ventures led the round, which saw participation from both YL Ventures and Intel Capital, the former having led the company’s seed round and the latter after leading its series A. The Syndicate Group also participated in the current round. Grip’s platform allows companies to manage SaaS use by employees, which could make organizations vulnerable if left unchecked.
Terra Closes to Mitigate Threat
Terra, a blockchain protocol and payment platform used for algorithmic stablecoins, announced that it had frozen its website after successful phishing attacks by threat actors. Even while the affected domains have been frozen, the company warns users to stay away until the matter is fully resolved.