Skip to content

Search results for «Security Breach» Page 3

  1. Studio Security Review: Cloud Breach Exposes User Data and API Keys

    Studio suffered unauthorized cloud access from September 30 to October 14, 2026, exposing account data, form submissions, and third-party API credentials for over 900,000 users.

    3 min read

  2. Ledger Security Review: Assessing Hardware Wallet Risks After Southeast Asia Tampering Incident

    Ledger security review covers the 2026 Southeast Asia reseller tampering incident, implant mechanism, confirmed losses, and updated purchase guidance for hardware wallet users.

    4 min read

  3. OpenCode Security Review: API Key Exposure and User Protections

    The October 2026 incident exposed third-party AI API keys for a small subset of OpenCode Console users. Affected users received direct notices and should rotate keys immediately.

    3 min read

  4. AI Marketing Tools Security Review: Singapore Breach Exposes 95,000 Emails

    A Singapore retailer exposed 95,364 customer emails after an employee used generative AI to create a bulk-mail script that placed addresses in the visible To field.

    3 min read

  5. Domain Registrar Security Risks: ccTLD Registry Hijacks Enable Unauthorized Certificates

    Registry-level compromises in three ccTLDs led to unauthorized TLS certificates for major domains. The incidents reveal gaps in domain registrar security controls and DNS validation processes.

    3 min read

  6. Klue Security Review: OAuth Token Breach and Salesforce Data Risks

    Klue suffered a supply-chain OAuth token theft in June 2026 that exposed Salesforce CRM data for hundreds of organizations. The platform contained the incident within a day, with no access to its core customer content.

    3 min read

  7. Bitget Security Review After $387 Million Breach: Reliability and User Protections

    Bitget absorbed a $387.5 million loss from its User Protection Fund after a September 2026 breach that spared cold wallets and customer balances.

    3 min read

  8. Gopax Security Review: Data Breach Details and Trustworthiness Assessment

    Gopax experienced a limited data exposure in October 2026 affecting nine accounts. The exchange remains a licensed South Korean VASP with ISMS and ISO certifications but lacks full personal data protection certification.

    3 min read

  9. Brevo Security Review: Lessons from SSO and Supply-Chain Incidents

    Two September 2026 incidents exposed authorization gaps in Brevo’s SSO and a hardcoded Cloudflare credential. The platform restored service quickly, yet the events underscore script and credential risks for email marketing users.

    3 min read

  10. SaaS Security Risks Highlighted by SourceNext Data Breach of 22.5 Million Records

    SourceNext disclosed unauthorized access to its member system, exposing up to 22.5 million records via API abuse between October 9 and 13, 2026.

    3 min read

  11. WordPress Hosting Security Risks Highlighted by CyberXero AI Campaign

    The CyberXero campaign shows how AI-augmented attacks exploit WordPress vulnerabilities at scale, raising questions about website builder trustworthiness and hosting protections.

    3 min read

  12. Quest Diagnostics Review After Quanum LSM Patient Records Access Incident

    Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager system in October 2026, affecting certain patient records. The company paused access, completed remediation within days, and began required notifications.

    3 min read