News
- Cybernews finds huge databse full of resumes and CVs
- It belongs to TalentHook
- The database apparently remains open to this day
Security researchers have discovered another large unprotected database which was leaking sensitive information to the general public.
Analysts fromCybernews found a misconfigured Azure Blob storage container available to anyone who knew where to look.
The archive contained almost 26 million files, and it was later determined that most of the files were resumes and CVs belonging to US citizens, including people’s full names, email addresses, phone numbers, education details, professional details, and employment history.
Get 55% off Incogni's Data Removal service with code TECHRADAR
Wipe your personal data off the internet with the Incogni data removal service. Stop identity thieves
and protect your privacy from unwanted spam and scam calls.View Deal
While it might not sound like much, the cache is a treasure trove for cybercriminals. Knowing these people are actively seeking new job opportunities, they can create fully customized, highly relevant phishing emails, successfully tricking people into downloading malware or sharing login credentials.
For example, the North Korean state-sponsored group Lazarus often targets job seekers on LinkedIn and elsewhere, sharing fake job description files which are nothing more than malware.
In some instances, they would have the victim jump through multiple job interview hoops, before asking for “trial work” which includes downloading malicious code.
Cybernews later determined that the archive belonged to TalentHook, a cloud-based applicant tracking system that connects HR departments with individuals seeking work.
Usually, when the researchers find unprotected databases such as this one, they notify the owners and get it locked down fast. However, in this instance, there was no confirmation that TalentHook actually barred access.
Instead, the Cybernews team shared advice with TalentHook, inviting the team to “change access controls to restrict public access and secure the container”. Therefore, it’s safe to assume that the database remains unlocked and available for all to find. The researchers also did not mention if someone found it already, but this is always a strong possibility.
At press time, there was no evidence of the data already being found and abused in the wild.
You might also like- Over 16 billion records leaked in "unimaginable" major data breach – here's what we know
- Take a look at our guide to the best authenticator app
- We've rounded up the best password managers
- A new, official GoPro Max 2 teaser shows it's finally gearing up for launch
- The 360-degree action cam has been in the works for years
- It'll compete with the recently-leaked DJI Osmo 360 and Insta360 X5
The GoPro Max 2 has been in development for so long it's almost gained mythical status, but the 360 camera is finally ready to officially launch – as some new teaser images have just confirmed.
GoPro shared the two Max 2 images, which show two skydivers using the camera, across all of its social media platforms including X (formerly Twitter). They were accompanied by the one-word tagline "dropping", which suggests we could finally see the camera soon.
The images don't tell us a huge amount about the true successor to the original GoPro Max, which launched way back in 2019. Like the GoPro Hero 13 Black, the camera body has a finned heat sink on the front to help it avoid overheating. The Max 2's lens also appears to be more centralized than on its predecessor.
GoPro's long-awaited camera will be dropping into an increasingly crowded space. The battle for the title of best 360 camera has heated up recently, with the arrival of the Insta360 X5, recent leaks unmasking the DJI Osmo 360, and Akaso today revealing the cheapest 360 camera so far, the Akaso 360.
But despite the growing competition, GoPro remains the most recognizable name in action cameras – so we're looking forward to seeing what the incoming Max 2 brings.
Analysis: the competition can only be good for 360 camera fansBack in February, GoPro released the Max (2025) – a barely-refreshed version of the original Max with a huge price cut. But now we're finally going to see a true successor. (Image credit: GoPro Max)The GoPro Max 2's backstory isn't a promising one. GoPro originally told us its Insta360 rival was "in the works" way back in September 2023, almost two years ago. Then in May 2024 it was slated for a launch by the end of that year, only to then slip to 2025.
So why the long delay? GoPro hasn't yet gone into specifics, but it's no secret the company has been struggling recently. Earlier this year, CEO Nick Woodman voluntarily waived his salaryto help the company, but GoPro's stock and revenue have both tanked over the past year.
Still, it's good to see the Max 2 finally skydive in through some dark clouds. While it will likely struggle to eclipse Insta360's latest flagships (the Chinese company has launched four iterations of its flagship 360-degree camera since the original Max), the Max 2 will hopefully bring some new features like interchangeable lenses and improved software to make it a good fight.
The good news for GoPro is that the benefits of 360 cameras still can't really be replicated by smartphones. Shooting everything around you and then pointing the camera wherever you want afterwards is still a very helpful editing trick. And the 360 camera space will benefit from having a rejuvenated GoPro in the mix – even if its Chinese rivals have learned how to thrive in the post-action camera world.
You might also like- Windows 11 24H2 is causing Windows Firewall to throw up false positives
- An event gets logged every time a user restarts their device
- Microsoft says the error message can be disregarded
Microsoft has reported a rather embarrassing issue with Windows Firewall after the June 2025 preview update of Windows 11 24H2, and the error remains a mystery for now.
In the known issues section of Microsoft's update on Windows 11 24H2 KB5060829 (OS Build 26100.4484) Preview, the company noted that "security event logs might include an error event related to Windows Firewall with Advanced Security."
Microsoft declared users can safely disregard the error, however details on why it's occurring are so far thin on the ground.
Windows Firewall is having issues with Microsoft code in latest Windows 11 build"The event appears as 'Config Read Failed' with the message 'More data is available,'" Microsoft noted. "Although this event is logged in every time the device restarts, it does not indicate a problem with Windows Firewall and can be disregarded."
Despite the Event Viewer log, Windows Firewall is expected to function normally, with no impact to system processes. Nevertheless, false positives in the Event Log can still be a nuisance, especially for system monitoring.
"This event is related to a feature that is currently under development and not fully implemented," the company confirmed, however no estimated fix date has been provided.
"We are working on releasing a resolution and will provide more information when it is available," Microsoft added.
Compared to past problems seen with Windows 11 24H2, the issue is fairly benign – at least it's not causing system crashes – but it does raise concern about potential issues or unfinished code making it into public builds.
Microsoft also noted that the same build has an issue with Chinese, Japanese and Korean characters in certain conditions – particularly when displayed at 96 DPI in Chromium-based browsers including its own not-so-popular browser, Edge. The company claims to be working with Google on a solution.
You might also like- We've listed the best firewalls
- Windows 10 users who don’t want to upgrade to Windows 11 get new lifeline from Microsoft
- Time to upgrade to Windows 11? These are the best business laptops and best mobile workstations