Skip to content

Search results for «API Security» Page 2

  1. CoinDCX review: Wallet Incident Raises Questions on Deprecated Address Management

    This CoinDCX review details the October 2026 movement of nearly $16 million in USDT from deprecated addresses and assesses ongoing security practices.

    3 min read

  2. eMudhra Review: Key Weakness Forces Exit from Global TLS Business

    Eight eMudhra intermediate CA keys generated with insufficient randomness led to immediate browser blocks and the company's withdrawal from global TLS issuance in October 2026.

    3 min read

  3. OVHcloud CLI security review after the October 2026 supply-chain incident

    The OVHcloud CLI supply-chain compromise lasted 94 minutes on October 19, 2026, and affected five releases. Users who downloaded binaries during that window should rotate credentials and reinstall from the latest version.

    3 min read

  4. Zeabur Security Review: Environment Variable Exposure in Two 2026 Breaches

    Two security incidents in 2026 exposed millions of environment variables on Zeabur before the platform announced its full shutdown by December 31.

    3 min read

  5. Supabase Security Review: 16,000 Databases Found Publicly Readable

    Research from September 2026 found over 16,000 Supabase Postgres databases exposing tables publicly, mostly due to missing Row Level Security policies.

    3 min read

  6. LiteLLM Security Review: Supply Chain Compromise Through Malicious Package

    A malicious LiteLLM release on October 21, 2026, exposed users to credential theft via infected PyPI packages and Docker images. Organizations must audit deployments and rotate keys immediately.

    3 min read

  7. ConnectWise Security Review: China-Linked AI Attack Hits MSP Cloud Backup Customers

    ConnectWise disclosed unauthorized access to Cloud Backup app identities in mid-October 2026. The incident involved China-linked actors using an AI framework against Microsoft 365 tenants managed by MSPs.

    3 min read

  8. Railway Security Review: Assessing the October 2026 Environment Variable Breach and Credential Risks

    Railway disclosed a security incident on October 21, 2026, involving possible access to encrypted environment variables containing customer secrets. The company urged all users to rotate keys immediately.

    3 min read

  9. Crime Stoppers data breach exposes 1.5 million Canadian tips via P3 Global Intel

    A March 2026 hack of P3 Global Intel exposed over 1.5 million Canadian Crime Stoppers tips spanning decades, with roughly half containing PII.

    3 min read

  10. Mastercard Stablecoin Security review: New Risk Intelligence Tool for Banks

    Mastercard launched Stablecoin Security on October 19, 2026, as a platform-agnostic API that screens stablecoin transactions for fraud and sanctions risks before on-chain movement.

    3 min read

  11. PHP security review: CVE-2026-109618 and CVE-2026-109619 Explained

    Critical remote code execution flaws in PHP core demand immediate updates for any site using versions before the October 2026 patches.

    3 min read

  12. PingCAP Review: TiDB Cloud Breach Exposes 10.6 TB of Data

    PingCAP's TiDB Cloud suffered a breach with 10.6 TB of data claimed stolen in October 2026. Official statements clarify what was and was not accessed.

    3 min read