McDonald’s AI Hiring Bot exposed 64 Million McDonald’s job applications to security researchers Who Tried the Password ‘123456’ - eviltoast
Would you like an IDOR with that? Leaking 64 million McDonald’s job applications
ian.sh
When applying for a job at McDonald's, over 90% of franchises use "Olivia," an AI-powered chatbot. We discovered a vulnerability that could allow an attacker to access more than 64 million job applications. This data includes applicants' names, resumes, email addresses, phone numbers, and personality test results.
  • ulterno@programming.devEnglish
    2·
    2 months ago

    then links to the company’s security@whatever email

    It didn’t on 2nd June so I’d say that’s not the case.
    Web pages change.