India’s most populous state, Uttar Pradesh (UP), has more than 350,000 coronavirus cases — with thousands added every day. It’s important for states to monitor those cases, but it’s equally important for them to keep that data safe from attackers. However, UP’s internal COVID-19 platform had multiple bugs that exposed citizens’ data. A team of security researchers from VPNMentor, Noam Rotem and Ran Locar, found that the state‘s internal coronavirus monitoring portal, Surveillance Platform Uttar Pradesh Covid-19, was riddled with bugs that put the personally identifiable data of citizens at risk. The first bug was in the git repository that stored the…
This story continues at The Next Web