A bank approved a Taboola pixel. That pixel quietly redirected logged-in users to a Temu tracking endpoint. This occurred without the bank’s knowledge, without user consent, and without a single security control registering a violation.
Hidden Passenger? How Taboola Routes Logged-In Banking Sessions to Temu
Summary + source link. No paywalls, no tracking.