Skip to content

Articles Page 3

  1. OVHcloud CLI security review after the October 2026 supply-chain incident

    The OVHcloud CLI supply-chain compromise lasted 94 minutes on October 19, 2026, and affected five releases. Users who downloaded binaries during that window should rotate credentials and reinstall from the latest version.

    3 min read

  2. Zeabur Security Review: Environment Variable Exposure in Two 2026 Breaches

    Two security incidents in 2026 exposed millions of environment variables on Zeabur before the platform announced its full shutdown by December 31.

    3 min read

  3. Capcom ID Review: Assessing the October 2026 Data Incident

    Capcom disclosed unauthorized access to its CAPCOM ID service on October 22, 2026, affecting 11.77 million records worldwide.

    3 min read

  4. Quest Diagnostics breach

    Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager system on October 21, 2026. The incident involves certain patient records used by healthcare providers for lab orders and results.

    3 min read

  5. Genesys review: Internal CRM and LMS access incident of October 2026

    Genesys detected unauthorized access to internal CRM and learning systems on October 16, 2026. Core customer platforms remained unaffected.

    3 min read

  6. Times Car breach exposes 6.6 million accounts with driver's license images

    Times Car breach affected 6.6 million accounts, including driver's license images for 1.6 million. Review of scope, timeline, and next steps.

    3 min read

  7. Supabase Security Review: 16,000 Databases Found Publicly Readable

    Research from September 2026 found over 16,000 Supabase Postgres databases exposing tables publicly, mostly due to missing Row Level Security policies.

    3 min read

  8. LiteLLM Security Review: Supply Chain Compromise Through Malicious Package

    A malicious LiteLLM release on October 21, 2026, exposed users to credential theft via infected PyPI packages and Docker images. Organizations must audit deployments and rotate keys immediately.

    3 min read

  9. ConnectWise Security Review: China-Linked AI Attack Hits MSP Cloud Backup Customers

    ConnectWise disclosed unauthorized access to Cloud Backup app identities in mid-October 2026. The incident involved China-linked actors using an AI framework against Microsoft 365 tenants managed by MSPs.

    3 min read

  10. Onamae Desktop Cloud review: Security Analysis After Malware Incident

    Onamae Desktop Cloud faced unauthorized access in October 2026, with up to 26,739 servers potentially compromised. This review examines the facts and user actions.

    2 min read

  11. Denmark CPR Breach Exposes 8.8 Million Records Through Weak Credentials

    An unauthorized party used compromised credentials at a Danish data firm to query 8.8 million CPR records over ten days in September 2026.

    3 min read

  12. Flirtella.com Review: No Verifiable Platform Found in Current Searches

    Extensive checks turned up no official site or documented service matching Flirtella.com descriptions of voice calls and photo features.

    3 min read