Skip to content

Search results for «Security Incident» Page 4

  1. Brevo Security Review: Lessons from SSO and Supply-Chain Incidents

    Two September 2026 incidents exposed authorization gaps in Brevo’s SSO and a hardcoded Cloudflare credential. The platform restored service quickly, yet the events underscore script and credential risks for email marketing users.

    3 min read

  2. AI Tools Security Review Shows Critical Observability Gaps in Public AI Agents

    The Partnership on AI report identifies six telemetry gaps that limit monitoring of publicly available AI agents and increase risks during scaling.

    3 min read

  3. SaaS Security Risks Highlighted by SourceNext Data Breach of 22.5 Million Records

    SourceNext disclosed unauthorized access to its member system, exposing up to 22.5 million records via API abuse between October 9 and 13, 2026.

    3 min read

  4. WordPress Hosting Security Risks Highlighted by CyberXero AI Campaign

    The CyberXero campaign shows how AI-augmented attacks exploit WordPress vulnerabilities at scale, raising questions about website builder trustworthiness and hosting protections.

    3 min read

  5. Ledger wallet security risks emerge from CryptoBilis tampering incident

    Tampered Ledger devices sold through CryptoBilis resulted in substantial fund drains in Southeast Asia. Official channels and direct purchases showed no involvement.

    3 min read

  6. Vercel Sandbox security review: Isolation limits for AI-generated code

    A detailed look at the isolation mechanisms, reported vulnerabilities, and remaining risks when running untrusted code in Vercel Sandbox microVMs.

    3 min read

  7. Quest Diagnostics Review After Quanum LSM Patient Records Access Incident

    Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager system in October 2026, affecting certain patient records. The company paused access, completed remediation within days, and began required notifications.

    3 min read

  8. Onamae Desktop Cloud review: October 2026 VPS breach and compensation process

    The Onamae Desktop Cloud breach allowed unauthorized access to Windows VPS instances used for FX trading, leading to data theft and unauthorized trades across more than 70 broker accounts.

    3 min read

  9. Yamato Transport Breach Exposes Kuroneko Pay-Later Payment Data

    Yamato Transport confirmed unauthorized access to its Kuroneko Pay-Later service in September 2026, resulting in the theft of millions of buyer and merchant records.

    3 min read

  10. Lawson Japan Data Breach Exposes 2.15 Million Customer Records

    Lawson disclosed unauthorized access to 2.15 million Lawson ID accounts and a smaller App Reservation incident, with email and name data exposed.

    2 min read

  11. JM Bullion Breach: Six-Month Delay in Customer Notifications

    An unauthorized actor accessed JM Bullion customer records between April 12 and 14, 2026. The company notified affected individuals six months later.

    3 min read

  12. CoinDCX review: Wallet Transfer Failures and Deprecated Address Handling

    CoinDCX absorbed losses from a failed sweep of compromised deposit addresses in October 2026. Current customer funds stayed in cold storage with no platform downtime.

    3 min read