Skip to content

Search results for «App Security» Page 5

  1. SourceNext Security Review: 22.5 Million Member Records Exposed Through API Abuse

    SourceNext disclosed an October 2026 breach where attackers abused an API to access up to 22.5 million member records. The incident highlights risks in member data systems and prompts password resets for users.

    3 min read

  2. OVHcloud CLI review: Security Risks from the October 2026 Malicious Release

    Attackers replaced OVHcloud CLI binaries for versions v0.11.0 to v0.15.0 on October 19, 2026. The incident exposed users to an information-stealing payload that targeted cloud credentials and SSH keys.

    3 min read

  3. OpenCode Security Review: Console Breach and Distillation Attack Risks

    OpenCode security review covers the October 2026 legacy Console breach tied to a distillation attack that exposed API keys for roughly 1.4 percent of hosted users.

    3 min read

  4. Ymirlink review: Cuenote FC data protection after credential theft incident

    Ymirlink reported unauthorized access to its Cuenote FC email service on October 19, 2026, with attackers obtaining staff credentials and exfiltrating an estimated 9 million records.

    3 min read

  5. Zeabur Security Review: Assessing the 2026 Breach, Data Exposure Risks, and Service Shutdown

    The October 2026 breach at Zeabur exposed millions of environment variables and accounts, leading to the platform's planned shutdown by year end.

    3 min read

  6. ConnectWise Cloud Backup review: Supply-chain attack compromises Microsoft 365 tenants

    A compromised credential in ConnectWise Cloud Backup allowed unauthorized Microsoft Graph access across customer tenants in mid-October 2026.

    3 min read

  7. Supabase Security Review: Misconfigured Databases Expose 16,000+ Records

    Analysis of 16,326 Supabase databases with public tables containing PII and authentication tokens, traced to customer misconfigurations rather than a platform breach.

    4 min read

  8. Aoki Infostealer Targets AI Coding Assistants for Credential Theft

    Symantec identified expanded Aoki infostealer variants that harvest credentials from AI coding assistants, enabling LLMjacking and unauthorized access to linked services.

    3 min read

  9. Denmark CPR Breach Exposes 8.8 Million Records in Central Person Register

    The October 2026 Denmark CPR breach exposed personal details of 8.8 million individuals through misuse of a third-party account, prompting a full security review of the Central Person Register.

    3 min read

  10. Studio Security Review: Cloud Breach Exposes User Data and API Keys

    Studio suffered unauthorized cloud access from September 30 to October 14, 2026, exposing account data, form submissions, and third-party API credentials for over 900,000 users.

    3 min read

  11. Gopax Security Review: Analyzing the 2026 Account Access Incident

    Gopax detected unauthorized access to nine accounts in October 2026 after a one-month delay, with no asset losses reported.

    3 min read

  12. Ledger Security Review: Assessing Hardware Wallet Risks After Southeast Asia Tampering Incident

    Ledger security review covers the 2026 Southeast Asia reseller tampering incident, implant mechanism, confirmed losses, and updated purchase guidance for hardware wallet users.

    4 min read