A vulnerability in the Android spyware Catwatchful, disguised as parental control software, exposed over 62,000 user accounts, including plaintext credentials and personal data. The spyware secretly monitors victims in real time and uploads data to a Firebase database. Researcher Eric Daigle also identified the developer behind the operation, prompting Google to enhance Play Protect safeguards.