Applebee’s exposed customers’ personal data after leaving database password in app

A security researcher discovered a hardcoded password in Applebee's Android app, allowing access to the company's customer database, which contained customer names, email addresses, and other personal data. The password was found by using AI to analyze thousands of lines of source code in the app, which has over a million downloads on Google Play. The issue was fixed by Applebee's after TechCrunch notified them, and the researcher verified that the fix was successful by retesting the app. A dummy account was created to test the vulnerability, and the researcher was able to retrieve the dummy account's information from the database.