Confide ‘Confidential Messenger’ flunked security reviews by two security firms. Security firm IOActive flagged five security issues in the app, which have been fixed by March 3. Security experts say the app uses end-to-end encryption, but the code is not available for experts to inspect. One of the most alarming findings concerned Confide’s API, which leaked information from a backend database. Another could have allowed an attacker to pull all Confide users’ contact details – including email addresses – from the company’s own database.”]
Source: https://www.cuinfosecurity.com/blogs/confide-confidential-messenger-flunked-security-reviews-p-2411