Typing Predictions of SwiftKey May Have Leaked Users' Emails

SwiftKey, the popular keyboard app that was bought by Microsoft earlier in the year, posted an entry on its blog that outlined immediate changes to its cloud sync service.

Unexpected Predictions

“This week, a few of our customers noticed unexpected predictions where unfamiliar terms and, in some rare cases, emails, appeared when using their mobile phone,” the post read. “We are working quickly to resolve this inconvenience.”

SwiftKey asserted that the irregularities did not pose a security threat to its customers. As a precaution, however, the app has disabled its cloud sync service and email address predictions.

The company admitted that the app’s email address predictor could generate another customer’s email address, and other “unfamiliar predictions” could show up as well. Even if it modifies the methods for harvesting typed emails, SwiftKey still has these unfamiliar phrases coming from somewhere.

It’s good that it is “working quickly” to resolve this major inconvenience, which stops the keyboard from performing the basic function that someone would want it to do in the first place. Without it, why even have the app on your phone?

Strange Suggestions

“A few users on Reddit have noticed that it’s been offering strange suggestions — including emails they’ve never seen and foreign language terms they’ve never used,” CSO Online reported.

The source also noted that one user got a brand new language in the deal. “And now, I’m getting someone else’s German predictions,” CSO Online quoted one user, who recently rooted a Samsung Galaxy S6 phone, as writing. “I have never typed German in my entire life.”

SwiftKey and Passwords

SwiftKey has said that it doesn’t collect any password or credit card data that may be typed by users. While that seems reassuring, consider that the tool has to recognize that the user-typed string is indeed a password. Otherwise, how can it assert that it is not storing it with other user-generated string data?

Microsoft hasn’t said when the cloud syncing feature could return, but one can only hope it will be working properly when it does come back.

Larry Loeb

Principal, PBC Enterprises

Cybersecurity dominates concerns among the C-suite, small businesses and the nation

4 min read - Once relegated to the fringes of business operations, cybersecurity has evolved into a front-and-center concern for organizations worldwide. What was once considered a technical issue managed by IT departments has become a boardroom topic of utmost importance. With the rise of sophisticated cyberattacks, the growing use of generative AI by threat actors and massive data breach costs, it is no longer a question of whether cybersecurity matters but how deeply it affects every facet of modern operations.The 2024 Allianz Risk…

Autonomous security for cloud in AWS: Harnessing the power of AI for a secure future

3 min read - As the digital world evolves, businesses increasingly rely on cloud solutions to store data, run operations and manage applications. However, with this growth comes the challenge of ensuring that cloud environments remain secure and compliant with ever-changing regulations. This is where the idea of autonomous security for cloud (ASC) comes into play.Security and compliance aren't just technical buzzwords; they are crucial for businesses of all sizes. With data breaches and cyber threats on the rise, having systems that ensure your…

Adversarial advantage: Using nation-state threat analysis to strengthen U.S. cybersecurity

4 min read - Nation-state adversaries are changing their approach, pivoting from data destruction to prioritizing stealth and espionage. According to the Microsoft 2023 Digital Defense Report, "nation-state attackers are increasing their investments and launching more sophisticated cyberattacks to evade detection and achieve strategic priorities."These actors pose a critical threat to United States infrastructure and protected data, and compromising either resource could put citizens at risk.Thankfully, there's an upside to these malicious efforts: information. By analyzing nation-state tactics, government agencies and private enterprises are…

Security Intelligence

{{title}}

{{title}}

{{title}}

Topics

Unexpected Predictions

Strange Suggestions

SwiftKey and Passwords

More from

Cybersecurity dominates concerns among the C-suite, small businesses and the nation

Autonomous security for cloud in AWS: Harnessing the power of AI for a secure future

Adversarial advantage: Using nation-state threat analysis to strengthen U.S. cybersecurity

Topic updates