Researchers discovered a serious vulnerability in McHire, McDonald’s AI-powered job application platform. The cause? An exposed API using the most basic credentials imaginable, possibly affecting 64 million job applicants. This is a case of cutting-edge AI combined with old-school security mistakes — and it may have exposed names, emails, phone numbers, and other personal info of tens of millions. Two researchers discovered that they could access the API with a Ramones-style song count-in and the username and password "123456." This highlights the dangers of combining new technology with old-school security mistakes. The full story is covered in a Wired article (and others): https://www.wired.com/story/mcdonalds-ai-hiring-chat-bot-paradoxai/ https://www.securityweek.com/mcdonalds-chatbot-recruitment-platform-leaked-64-million-job-applications/ https://www.csoonline.com/article/4020919/mcdonalds-ai-hiring-tools-password-123456-exposes-data-of-64m-applicants.html Platforms like Plixer One can help detect compromised APIs, data exfiltration, and break-ins before they spiral. Don’t let weak credentials be your weakest link. 👍 Like, 💬 comment, and 🔔 subscribe for more stories that blend cybersecurity, tech, and real-world impact.