Israeli-linked server code found in Waze, but no evidence of data transmission

Technical reviews of Waze code found no spyware behavior, but identified several Israeli-linked server addresses, including one associated with an inbox test server.

The test-server address uses HTTP instead of HTTPS, which means information sent through it could be read or altered if intercepted and not otherwise secured.

Cybersecurity experts confirmed the presence of the test-server reference in Waze’s code, but noted that the address alone does not prove the connection was active or that location data had been transmitted through it.