Right tool, clear rules. The big new models are for hard problems, the cheap ones are for the repeat work, and either way a small firm still needs the basics: no passwords baked into apps, a person checking anything that affects a customer's money or rights, and a clear answer on where your meeting audio goes. Wyndham Android app password (TechCrunch): never ship passwords in apps; ask suppliers how they handle secrets.
What was reported
TechCrunch (Zack Whittaker), 9 November 2026. Security researcher Robert Wiggins (What Security) found a password in the source code of Wyndham's Android app that gave access to an internal Salesforce-hosted database holding customer names, email addresses, member numbers, login tokens and company files.
The credential was revoked after TechCrunch contacted Wyndham. Wyndham said its security teams have no evidence of any unauthorised access and would not say how long the password was in the app. Wiggins told TechCrunch he used AI tools to find this and a similar flaw in Applebee's app.
Read the full daily brief hub: www.aifusionautomations.com/news/
Want help putting this to work in your business? Book a free 15-minute call at https://www.aifusionautomations.com/book-a-call.html or email grant@aifusionautomations.com