The US is now leading a global surge in new gas power plants being built in large part to satisfy growing energy demand for data centers. And more gas means more planet-heating pollution.
Technology
Massive data breach exposes 184 million passwords and logins
Data breaches are no longer rare events but a persistent problem.
We’ve been seeing regular incidents at public-facing companies across various sectors, including healthcare, retail and finance. While bad actors are certainly to blame, these corporations aren’t entirely without fault. They often make it easy for hackers to access user data by failing to protect it properly.
A recent example came to light when a cybersecurity researcher discovered an open database containing over 184 million account credentials.
Join The FREE CyberGuy Report: Get my expert tech tips, critical security alerts and exclusive deals — plus instant access to my free Ultimate Scam Survival Guide when you sign up!
Illustration of a hacker at work. (Kurt “CyberGuy” Knutsson)
How the database was uncovered and what it contained
Cybersecurity researcher Jeremiah Fowler has revealed the existence of an open database that contains 184,162,718 million account credentials. These include email addresses, passwords, usernames and URLs for platforms such as Google, Microsoft, Apple, Facebook and Snapchat.
The information also covers banking services, medical platforms and government accounts. Most shockingly, the entire dataset was left completely unsecured. There was no encryption, no authentication required and no form of access control. It was simply a plain text file sitting online for anyone to find.
19 BILLION PASSWORDS HAVE LEAKED ONLINE: HOW TO PROTECT YOURSELF
Fowler located the database during routine scanning of publicly exposed assets. What he found was staggering. The file included hundreds of millions of unique records containing user credentials linked to the world’s largest technology and communication platforms. There were also account details for financial services and official portals used by state institutions.
The file was not protected in any way. Anyone who discovered the link could open it in a browser and instantly view sensitive personal data. No software exploit was needed. No password was asked for. It was as open as a public document.
Illustration of a hacker at work. (Kurt “CyberGuy” Knutsson)
200 MILLION SOCIAL MEDIA RECORDS LEAKED IN MAJOR X DATA BREACH
Where did the data come from
Fowler believes the data was harvested using an infostealer. These lightweight tools are favored by cybercriminals for their ability to silently extract login credentials and other private information from compromised devices. Once stolen, the data is often sold on dark web forums or used in targeted attacks.
After reporting the breach, the hosting provider quickly removed access to the file. However, the owner of the database remains unknown. The provider did not disclose who uploaded it or whether the database was part of a legitimate archive that was accidentally published. Fowler could not determine whether this was the result of negligence or an operation with malicious intent.
To verify the data, Fowler contacted some individuals listed in the records. Several confirmed that the information was accurate. This confirmation turns what might seem like abstract statistics into something very real. These were not outdated or irrelevant details. These were live credentials that could allow anyone to hijack personal accounts in seconds.
1.7 BILLION PASSWORDS LEAKED ON DARK WEB AND WHY YOURS IS AT RISK
Login on a tablet. (Kurt “CyberGuy” Knutsson)
HR FIRM CONFIRMS 4M RECORDS EXPOSED IN MAJOR HACK
6 ways to protect yourself after a data breach
1. Change your password on every platform: If your login credentials have been exposed, it’s not enough to change the password on just one account. Cybercriminals often try the same combinations across multiple platforms, hoping to gain access through reused credentials. Start by updating your most critical accounts, email, banking, cloud storage and social media, then move on to others. Use a new, unique password for each platform and avoid variations of old passwords, as they can still be predictable. Consider using a password manager to generate and store complex passwords.
Our top-rated password manager delivers powerful protection to help keep your accounts secure. It features real-time data breach monitoring to alert you if your login details have been exposed, plus a built-in data breach scanner that checks your saved emails, passwords and credit card information against known leak databases. A password health checker also highlights weak, reused or compromised passwords so you can strengthen your online defenses with just a few clicks. Get more details about my best expert-reviewed Password Managers of 2025 here.
2. Enable two-factor authentication: Two-factor authentication, or 2FA, is a critical security feature that drastically reduces the risk of unauthorized access. Even if someone has your password, they won’t be able to log in without the second verification step, usually a one-time code sent to your phone or an authenticator app. Enable 2FA on all services that support it, especially your email, financial accounts and any service that stores sensitive personal data.
3. Watch for unusual account activity: After a breach, it’s common for compromised accounts to be used for spam, scams, or identity theft. Pay close attention to signs such as login attempts from unfamiliar locations, password reset requests you didn’t initiate or unexpected messages sent from your accounts. Most platforms allow you to review login history and connected devices. If you see something off, take action immediately by changing your password and revoking suspicious sessions.
4. Invest in personal data removal services: You should also consider a data removal service. Given the scale and frequency of breaches like the one described above, relying on personal caution alone is no longer enough. Automated data removal services can provide an essential extra layer of defense by continuously scanning for and helping eliminate your exposed information from data broker sites and other online sources. While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Check out my top picks for data removal services here.
Get a free scan to find out if your personal information is already out on the web.
5. Avoid clicking on suspicious links and use strong antivirus software: One of the most common post-breach threats is phishing. Cybercriminals often use information from leaked databases to craft convincing emails that urge you to verify your account or reset your password. Never click on links or download attachments from unknown or suspicious sources. Instead, visit websites by typing the URL directly into your browser.
The best way to safeguard yourself from malicious links is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.
6. Keep your software and devices up to date: Many cyberattacks exploit known vulnerabilities in outdated software. Operating systems, browsers, antivirus programs and even apps need to be updated regularly to patch security flaws. Turn on automatic updates wherever possible so you’re protected as soon as fixes are released. Staying current with your software is one of the easiest and most effective ways to block malware, ransomware and spyware from infiltrating your system.
HACKERS USING MALWARE TO STEAL DATA FROM USB FLASH DRIVES
Kurt’s key takeaway
Security is not only the responsibility of companies and hosting providers. Users need to adopt better practices, including unique passwords, multifactor authentication and regular reviews of their digital footprint. The careless exposure of over 184 million credentials is not just a mistake. It is an example of how fragile our systems remain when even basic protection is absent. In an era where artificial intelligence, quantum computing, and global connectivity are reshaping technology, it is unacceptable that plain text files containing financial and governmental credentials are still left sitting online.
Do you feel that companies are doing enough to protect your data from hackers and other cyber threats? Let us know by writing us at Cyberguy.com/Contact
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter
Ask Kurt a question or let us know what stories you’d like us to cover.
Follow Kurt on his social channels:
Answers to the most-asked CyberGuy questions:
New from Kurt:
Copyright 2025 CyberGuy.com. All rights reserved.
Gas-fired power generation in development globally rose by 31 percent in 2025. Almost a quarter of that added capacity is slated for the US, which has surpassed China with the biggest increase of any country. More than a third of that growth in the US is expected to directly power data centers, according to a recent analysis by the nonprofit Global Energy Monitor (GEM).
More gas means more planet-heating pollution
The rush to install more powerful hardware into expanding data centers used for generative AI has led to forecasts of skyrocketing power demand. There’s still a lot of uncertainty about whether AI will become as ingrained in everyday life as tech companies might like, and many proposed data centers could fall flat. Even so, plans to build out more gas plants in the name of AI are stalling efforts to transition to cleaner energy sources.
“There is a risk that this capacity could lock in future emissions and become stranded assets if anticipated electricity demand from AI never materializes,” Jenny Martos, project manager for GEM’s Global Oil and Gas Plant Tracker, said in a press release.
Already, 2026 is shaping up to be a record-smashing year for gas. If all of this year’s proposed projects cross the finish line, it would be an even bigger jump in added capacity than the record set in 2002. That’s pretty remarkable considering the 2000s ushered in America’s so-called “shale gas revolution,” when fracking suddenly unleashed previously hard-to-reach reserves. Gas is now a cheaper power source than coal and creates less carbon pollution when burned. But gas production releases methane, a more potent greenhouse gas than carbon dioxide even though it doesn’t persist in the atmosphere for as long.
Image: Global Energy Monitor
Ramping up electricity generation from gas is also a sharp pivot away from global climate goals. A decade ago, nearly every country on Earth — including its two biggest greenhouse gas polluters, China and the US — signed a historic deal in Paris to limit global warming. The only way to achieve the most ambitious goals set out in the Paris agreement would be to replace fossil fuels with less-polluting alternatives like renewable energy and slash greenhouse gas emissions to net zero by around 2050.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
NEWYou can now listen to Fox News articles!
Apple often promotes the App Store as a secure place to download apps. The company highlights strict reviews and a closed system as key protections for iPhone users. That reputation now faces serious questions.
New research shows that thousands of iOS apps approved by Apple contain hidden security flaws. These flaws can expose user data, cloud storage and even payment systems.
The issue is not malware; it’s poor security practices baked directly into the app code.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
APPLE WARNS MILLIONS OF IPHONES ARE EXPOSED TO ATTACK
Cybernews researchers found that many iOS apps store sensitive secrets directly inside app files, where they can be easily extracted. (Kurt “CyberGuy” Knutsson)
What researchers discovered inside iOS apps
Security researchers at Cybernews, a cybersecurity research firm, analyzed the code of more than 156,000 iPhone apps. That represents about 8% of all apps available worldwide.
Here is what they found:
- Over 815,000 hidden secrets inside app code
- An average of five secrets per app
- 71% of apps leaked at least one secret
These secrets include passwords, API keys and access tokens. Developers place them directly inside apps, where anyone can extract them. According to Cybernews researcher Aras Nazarovas, this makes attackers’ jobs much easier than most users realize.
What are hardcoded secrets in simple terms?
A hardcoded secret is sensitive information saved directly inside an app instead of being protected on a secure server. Think of it like writing your bank PIN on the back of your debit card. Once someone downloads the app, they can inspect its files and pull out those secrets. Attackers do not need special access or advanced hacking tools. Both the Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation warn developers not to do this. Yet it is happening at a massive scale.
Cloud storage leaks exposed huge amounts of data
One of the most serious problems involves cloud storage. More than 78,000 iOS apps contained direct links to cloud storage buckets. These buckets store files such as photos, documents, receipts and backups. In some cases, no password was required at all. Researchers found:
- 836 storage buckets are fully open to the public
- Over 76 billion exposed files
- More than 406 terabytes of leaked data
This data included user uploads, registration details, app logs and private records. Anyone who knew where to look could view or download it.
APPLE PATCHES TWO ZERO-DAY FLAWS USED IN TARGETED ATTACKS
This chart shows the most common types of hardcoded secrets found inside iOS apps, with Google-related keys appearing most often, according to Cybernews research. (Cybernews)
Firebase databases were also left open
Many iOS apps rely on Google Firebase to store user data. Cybernews found more than 51,000 Firebase database links hidden in app code. While some were protected, over 2,200 had no authentication. That exposed:
- Nearly 20 million user records
- Messages, profiles, and activity logs
- Databases that are mostly hosted in the U.S.
If a Firebase database is not locked down, attackers can browse user data like a public website.
Payment and login systems were at risk too
Some of the leaked secrets were far more dangerous than analytics or ads. Researchers discovered secret keys for:
- Stripe, which handles payments and refunds
- JWT authentication systems that control logins
- Order management tools used by shopping apps
A leaked Stripe secret key can allow attackers to issue refunds, move money or access billing details. Leaked login keys can let attackers impersonate users or take over accounts.
AI and social apps were among the worst offenders
Some of the apps with the largest leaks were related to artificial intelligence. According to VX Underground, security firm CovertLabs identified 198 iOS apps leaking user data. The worst known case was Chat & Ask AI by Codeway. Researchers say it exposed chat histories, phone numbers and email addresses tied to millions of users. Another app, YPT – Study Group, reportedly leaked messages, user IDs and access tokens. CovertLabs tracks these incidents in a restricted repository called Firehound. The full list of affected apps has not been publicly released, and researchers say the data is limited to prevent further exposure and to give developers time to fix security flaws.
MALICIOUS GOOGLE CHROME EXTENSIONS HIJACK ACCOUNTS
This example shows how sensitive keys like Google API credentials and Stripe payment secrets can be stored directly inside an iOS app’s files, where they are easy to extract. (Cybernews)
Why Apple’s App review can miss hidden security risks
Apple reviews apps before they appear in the App Store. However, the review process does not scan app code for hidden secrets. If an app behaves normally during testing, it can pass review even if sensitive keys are buried inside its files. This creates a gap between Apple’s security claims and real-world risks. Removing leaked secrets is not simple for developers. They must revoke old keys, create new ones and rebuild parts of their apps. That can break features and delay updates. Even though Apple says most app updates are reviewed within 24 hours, some updates take weeks. During that time, vulnerable apps can remain available.
CyberGuy contacted Apple for comment, but did not receive a response before publication.
Ways to stay safe right now
You cannot easily inspect an app for hidden secrets. Apple does not provide tools for that. Still, you can reduce your risk and limit exposure by being selective and cautious. These steps help reduce the risk if an app leaks data behind the scenes.
1) Stick to established app developers
Well-known developers tend to have stronger security teams and better update practices. Smaller or unknown apps may rush features to market and overlook security basics. Before downloading, check how long the developer has been active and how often the app is updated.
2) Review and limit app permissions
Many apps ask for more access than they need. Location, contacts, photos and microphone access all increase the risk of data leaks. Go into your iPhone settings and remove permissions that are not essential for the app to work.
3) Delete apps you no longer use
Unused apps still retain access to data you shared in the past. They may also store information on remote servers long after you stop opening them. If you have not used an app in months, remove it. Here’s how: Open Settings, tap General, select iPhone Storage, and scroll through the list of apps to see when each one was last used. Tap any app you no longer need and select Delete App to remove it and reduce ongoing data exposure.
4) Be cautious with personal and financial details
Avoid entering sensitive information unless it is absolutely necessary. This includes full names, addresses, payment details and private conversations. AI apps are especially risky if you share deeply personal content.
5) Use a password manager for every account
A password manager creates strong, unique passwords for each app and service. This prevents attackers from accessing multiple accounts if one app leaks data. Never reuse passwords tied to your email address.
Next, see if your email has been exposed in past breaches. Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.
6) Change passwords tied to exposed apps
If an app uses your email address for login, change that password immediately. Do this even if there is no confirmation of a breach. Attackers often test leaked credentials across other services.
7) Consider using a data removal service
Some leaked data ends up with data brokers that sell personal information online. A data removal service can help find and remove your details from these databases. This reduces the chance that exposed app data gets reused for scams or identity theft.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.
8) Monitor your accounts for unusual activity
Watch for unexpected emails, password reset notices, login alerts, or payment confirmations. These can signal that leaked data is already being abused. Act quickly if something looks off.
9) Pause use of risky AI and chat apps
If you use AI apps for private conversations, consider stopping until the developer confirms security fixes. Once data is exposed, it cannot be pulled back. Avoid sharing sensitive details with apps that store conversations remotely.
Kurt’s key takeaways
Apple’s App Store still offers important protections, but this research shows it is not foolproof. Many trusted iPhone apps quietly expose data due to basic security mistakes. Until app reviews improve, you need to stay alert and limit how much data you share.
How many apps on your iPhone have access to information you would not want exposed? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Copyright 2026 CyberGuy.com. All rights reserved.
Apple says the iPhone had its “best-ever” quarter, with revenue hitting more than $85.3 billion over the past few months. The company announced the news as part of its Q1 2026 earnings report, which also revealed record-breaking revenue of $143.8 billion, up 16 percent when compared to the same time last year.
“iPhone had its best-ever quarter driven by unprecedented demand, with all-time records across every geographic segment, and Services also achieved an all-time revenue record, up 14 percent from a year ago,” Apple CEO Tim Cook says in the press release.
Apple’s services revenue, which includes subscriptions like Apple Music, iCloud, and Apple TV surged 14 percent year over year, while Mac and wearable revenue were down.
In the coming months, Apple will bring promised AI-powered personalization features to Siri. Apple is partnering with Google to power this upgrade, which will use a custom version of Google’s Gemini AI model.
The company is also acquiring an AI startup, called Q.ai, for $2 billion, according to the Financial Times. Though there aren’t any details on how Apple plans to use the startup’s technology, the Financial Times reports that Q.ai’s patents “show its technology being used in headphones or glasses, using ‘facial skin micro movements’ to communicate without talking.”
Texas5 minutes ago
‘Heated Rivalry’ hits the party scene in North Texas
Utah11 minutes ago
Oklahoma State visits Utah after Dawes’ 23-point outing
Vermont17 minutes ago
Vermont officer, deputy cleared in August 2025 officer-involved shooting
Virginia23 minutes ago
Five Virginia localities awarded opioid settlement funds for new programs
Wisconsin35 minutes ago
Lawmakers propose bell-to-bell cellphone ban in Wisconsin schools
Florida1 year ago
Florida High School Football Rankings: Top 25 teams – Oct. 21
Connecticut2 years ago
Cleary's 21 help Le Moyne down Central Connecticut State 69-64 in OT
Oregon2 years ago
How old is Bo Nix? What to know about Oregon quarterback ahead of 2024 NFL Draft
Virginia2 years ago
99th annual Pony Swim held in Virginia
Indiana1 year ago
Indiana Members Credit Union announced as new anchor tenant at Bottleworks District
Politics3 hours ago
AOC voices support for anti-ICE shutdown, declines to participate
World4 hours ago
Zelenskyy seeks 50,000 Russian ‘losses’ a month to win the Ukraine war
News4 hours ago
Trump sues IRS and Treasury for $10 billion over leaked tax information
News14 hours ago
Map: 4.2-Magnitude Earthquake Shakes Montana
Politics15 hours ago
Virginia Democrats seek dozens of new tax hikes, including on dog walking and dry cleaning
-
Illinois1 week agoIllinois school closings tomorrow: How to check if your school is closed due to extreme cold
-
Pennsylvania4 days agoRare ‘avalanche’ blocks Pennsylvania road during major snowstorm
-
Science1 week agoContributor: New food pyramid is a recipe for health disasters
-
Technology1 week agoRing claims it’s not giving ICE access to its cameras
-
Science1 week agoFed up with perimenopause or menopause? The We Do Not Care Club is here for you
-
Movie Reviews1 week ago
Movie Review: In ‘Mercy,’ Chris Pratt is on trial with an artificial intelligence judge
-
Politics1 week agoSupreme Court appears ready to keep Lisa Cook on Federal Reserve board despite Trump efforts to fire her
-
News1 week agoVideo: Jack Smith Defends His Trump Indictments During House Hearing
