Skip to content

Search results for «Security» Page 4

  1. Domain Registrar Security Risks: ccTLD Registry Hijacks Enable Unauthorized Certificates

    Registry-level compromises in three ccTLDs led to unauthorized TLS certificates for major domains. The incidents reveal gaps in domain registrar security controls and DNS validation processes.

    3 min read

  2. ConnectWise Security Review: Supply-Chain Incident Impact on Microsoft 365 Tenants

    The October 2026 compromise of ConnectWise Cloud Backup credentials allowed unauthorized access to 162–173 Microsoft 365 tenants. This review details the timeline, permissions abused, and recommended actions.

    3 min read

  3. Klue Security Review: OAuth Token Breach and Salesforce Data Risks

    Klue suffered a supply-chain OAuth token theft in June 2026 that exposed Salesforce CRM data for hundreds of organizations. The platform contained the incident within a day, with no access to its core customer content.

    3 min read

  4. Bitget Security Review After $387 Million Breach: Reliability and User Protections

    Bitget absorbed a $387.5 million loss from its User Protection Fund after a September 2026 breach that spared cold wallets and customer balances.

    3 min read

  5. Gopax Security Review: Data Breach Details and Trustworthiness Assessment

    Gopax experienced a limited data exposure in October 2026 affecting nine accounts. The exchange remains a licensed South Korean VASP with ISMS and ISO certifications but lacks full personal data protection certification.

    3 min read

  6. Brevo Security Review: Lessons from SSO and Supply-Chain Incidents

    Two September 2026 incidents exposed authorization gaps in Brevo’s SSO and a hardcoded Cloudflare credential. The platform restored service quickly, yet the events underscore script and credential risks for email marketing users.

    3 min read

  7. AI Tools Security Review Shows Critical Observability Gaps in Public AI Agents

    The Partnership on AI report identifies six telemetry gaps that limit monitoring of publicly available AI agents and increase risks during scaling.

    3 min read

  8. Cryptocurrency Wallets Security Review: OkoBot Malware Framework Analysis

    Kaspersky identified the OkoBot framework in January 2026 as a modular tool stealing cryptocurrency wallet data across 25 countries through ClickFix tactics and fake GitHub repositories.

    3 min read

  9. SaaS Security Risks Highlighted by SourceNext Data Breach of 22.5 Million Records

    SourceNext disclosed unauthorized access to its member system, exposing up to 22.5 million records via API abuse between October 9 and 13, 2026.

    3 min read

  10. AI Tools Security Review Shows Malware Campaigns Targeting Claude and ChatGPT Users

    Analyses from April to October 2026 recorded over 1,200 sandbox submissions tied to fake AI tool campaigns, with Claude and ChatGPT lures dominating.

    3 min read

  11. WordPress Hosting Security Risks Highlighted by CyberXero AI Campaign

    The CyberXero campaign shows how AI-augmented attacks exploit WordPress vulnerabilities at scale, raising questions about website builder trustworthiness and hosting protections.

    3 min read

  12. Ledger wallet security risks emerge from CryptoBilis tampering incident

    Tampered Ledger devices sold through CryptoBilis resulted in substantial fund drains in Southeast Asia. Official channels and direct purchases showed no involvement.

    3 min read