CyberHappenings logo
โ˜ฐ

Vyro AI Leak Exposes User Data from Three AI Applications

First reported
Last updated
๐Ÿ“ฐ 1 unique sources, 1 articles

Summary

Hide โ–ฒ

Vyro AI, a Pakistan-based developer of AI-content creation applications, exposed 116GB of sensitive user data from three of its applications: ImagineArt, Chatly, and Chatbotx. The data, including AI prompts, bearer authentication tokens, and user agents, was accessible to attackers for months. The leak could have allowed for monitoring user behavior, extracting sensitive information, and hijacking user accounts. The exposed data involved production and development environments and consisted of logs spanning two days to one week. The leak highlights the risks associated with poor cyber hygiene in AI applications, particularly as companies rush to adopt AI technologies without adequate security measures.

Timeline

  1. 12.09.2025 00:01 ๐Ÿ“ฐ 1 articles ยท โฑ 1d ago

    Vyro AI Leak Exposed User Data from Three AI Applications

    Vyro AI, a Pakistan-based developer of AI-content creation applications, exposed 116GB of sensitive user data from three of its applications: ImagineArt, Chatly, and Chatbotx. The data, including AI prompts, bearer authentication tokens, and user agents, was accessible to attackers for months. The leak could have allowed for monitoring user behavior, extracting sensitive information, and hijacking user accounts. The exposed data involved production and development environments and consisted of logs spanning two days to one week. The leak highlights the risks associated with poor cyber hygiene in AI applications, particularly as companies rush to adopt AI technologies without adequate security measures.

    Show sources

Information Snippets

  • Vyro AI's ImagineArt, Chatly, and Chatbotx applications leaked 116GB of sensitive user data.

    First reported: 12.09.2025 00:01
    ๐Ÿ“ฐ 1 source, 1 article
    Show sources
  • The data included AI prompts, bearer authentication tokens, and user agents.

    First reported: 12.09.2025 00:01
    ๐Ÿ“ฐ 1 source, 1 article
    Show sources
  • The database was indexed by IoT search engines in February, making it accessible to attackers for months.

    First reported: 12.09.2025 00:01
    ๐Ÿ“ฐ 1 source, 1 article
    Show sources
  • The leak involved logs from production and development environments, spanning two days to one week.

    First reported: 12.09.2025 00:01
    ๐Ÿ“ฐ 1 source, 1 article
    Show sources
  • The exposed tokens could have been used for account hijacking, allowing access to chat histories, generated images, and AI tokens.

    First reported: 12.09.2025 00:01
    ๐Ÿ“ฐ 1 source, 1 article
    Show sources
  • Vyro AI has over 150 million app downloads across its portfolio, with Chatly being the most popular.

    First reported: 12.09.2025 00:01
    ๐Ÿ“ฐ 1 source, 1 article
    Show sources
  • The leak highlights the risks of poor cyber hygiene in AI applications, particularly as companies rush to adopt AI technologies.

    First reported: 12.09.2025 00:01
    ๐Ÿ“ฐ 1 source, 1 article
    Show sources