Security Flaws in Mira Fertility Tracker Expose Sensitive Health Data
Article Content
- •20 security vulnerabilities found in the Mira Ultra 4 fertility tracker.
- •Over 600,000 user accounts potentially exposed to unauthorized access.
- •Findings reported to FDA and CISA for further investigation.
Researchers from Northeastern University identified 20 security vulnerabilities in the Mira Ultra 4 fertility tracker, allowing attackers to impersonate users, manipulate hormone readings, and access sensitive health information. The vulnerabilities were found in both the device and its companion mobile application. Over 600,000 user accounts could have been affected, potentially exposing sensitive health data to unauthorized access. The findings were presented at DEF CON's Biohacking Village and were funded by the U.S. Department of Health and Human Services. The vulnerabilities were reported to the FDA and CISA for further action. The researchers emphasized the need for improved security in consumer health devices. No specific CVEs were mentioned in the articles.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Northeastern University in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What vulnerabilities were found?
How many users are affected?
What actions have been taken?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…