Articles Page 5
-
Nikkei Security Review: Third Data Breach in a Month Exposing 1.8 Million Records
Nikkei disclosed a cloud service breach on October 16, 2026, that exposed 1.83 million records. The incident follows two earlier compromises within roughly a month.
-
Ledger review: Southeast Asia reseller tampering leads to estimated $90M losses
An organized group inserted implants into Ledger Nano X devices sold through Malaysian reseller CryptoBilis, draining an estimated $86M to $93M from user wallets.
-
Studio security review: Cloud breach exposes form data and API keys
Studio suffered unauthorized access to its cloud environment in late September 2026, exposing account details, stored form data, and third-party credentials for registered users.
-
SourceNext Security Review: 22.5 Million Member Records Exposed Through API Abuse
SourceNext disclosed an October 2026 breach where attackers abused an API to access up to 22.5 million member records. The incident highlights risks in member data systems and prompts password resets for users.
-
OVHcloud CLI review: Security Risks from the October 2026 Malicious Release
Attackers replaced OVHcloud CLI binaries for versions v0.11.0 to v0.15.0 on October 19, 2026. The incident exposed users to an information-stealing payload that targeted cloud credentials and SSH keys.
-
OpenCode Security Review: Console Breach and Distillation Attack Risks
OpenCode security review covers the October 2026 legacy Console breach tied to a distillation attack that exposed API keys for roughly 1.4 percent of hosted users.
-
Ymirlink review: Cuenote FC data protection after credential theft incident
Ymirlink reported unauthorized access to its Cuenote FC email service on October 19, 2026, with attackers obtaining staff credentials and exfiltrating an estimated 9 million records.
-
TrustBank review: 4.45 Million Donor Records Exposed in Furusato Choice Breach
TrustBank reported unauthorized access to its Furusato Choice platform on October 17, 2026, resulting in the exposure of 4.45 million donor records including names, addresses, and hashed passwords.
-
Zeabur Security Review: Assessing the 2026 Breach, Data Exposure Risks, and Service Shutdown
The October 2026 breach at Zeabur exposed millions of environment variables and accounts, leading to the platform's planned shutdown by year end.
-
ConnectWise Cloud Backup review: Supply-chain attack compromises Microsoft 365 tenants
A compromised credential in ConnectWise Cloud Backup allowed unauthorized Microsoft Graph access across customer tenants in mid-October 2026.
-
Supabase Security Review: Misconfigured Databases Expose 16,000+ Records
Analysis of 16,326 Supabase databases with public tables containing PII and authentication tokens, traced to customer misconfigurations rather than a platform breach.
-
Master of Malt Security Review: BigCommerce App Key Breach Exposed Customer Data
Master of Malt confirmed a customer data exposure in September 2026 after a compromised BigCommerce app key allowed access to names, emails, and addresses for roughly four days.