Get the latest tech news
A Lovense security flaw may be letting people take over accounts without a password
The sex toy maker appears to be once again leaking intimate personal data.
BobDaHacker said they initially reported the bugs to Lovense with assistance from the sex tech hacking project The Internet Of Dongs in March 2025, and received $3,000 in total for flagging them via the HackerOne security platform. After a series of interactions with Lovense representatives, they were told in early June that the account takeover bug had been fixed during the previous month, which the researcher claims is not true. A commenter on the Reddit post, who claimed to be a Lovense representative, called the recordings a "minor software bug" that affected the Android version of the app and said at the time that it had been fixed in an update.
Or read this on Endgadget
