Vyro AI Leak Reveals Poor Cyber Hygiene

Vyro AI has inadvertently leaked 116GB of sensitive user data from three products—ImagineArt, Chatly and Chatbotx—according to researchers at Cybernews who uncovered the breach. The data included AI prompts, bearer authentication tokens and user agents, with the database first indexed by IoT search engines in February, suggesting it could have been visible to attackers for months.

The company, based in Pakistan, has more than 150 million app downloads across its portfolio, and Chatly is the most popular with more than 100,000 downloads. Cybernews researchers warned the leak was significant because it could allow monitoring of user behavior, extraction of shared information and hijacking of user accounts. The exposure involved production and development environments and consisted of roughly two days to a week’s worth of logs at any given time.