Skip to content

Search results for «API Security»

  1. OpenCode Security Review: API Key Exposure Following Distillation Attack

    A distillation attack on October 17, 2026, exposed third-party API keys for a small percentage of OpenCode Console users. Affected accounts should rotate keys and review billing activity immediately.

    3 min read

  2. Studio security review: Cloud breach exposes form data and API keys

    Studio suffered unauthorized access to its cloud environment in late September 2026, exposing account details, stored form data, and third-party credentials for registered users.

    4 min read

  3. SourceNext Security Review: 22.5 Million Member Records Exposed Through API Abuse

    SourceNext disclosed an October 2026 breach where attackers abused an API to access up to 22.5 million member records. The incident highlights risks in member data systems and prompts password resets for users.

    3 min read

  4. Studio Security Review: Cloud Breach Exposes User Data and API Keys

    Studio suffered unauthorized cloud access from September 30 to October 14, 2026, exposing account data, form submissions, and third-party API credentials for over 900,000 users.

    3 min read

  5. OpenCode Security Review: API Key Exposure and User Protections

    The October 2026 incident exposed third-party AI API keys for a small subset of OpenCode Console users. Affected users received direct notices and should rotate keys immediately.

    3 min read

  6. 302.ai Review: Security Risks After Azure Storage Leak

    The 302.ai data exposure involved 17.6 million files from a misconfigured Azure bucket. This review details the incident and practical steps for users.

    2 min read

  7. DodoPayments review: Security After Metabase SQL Injection Incident

    Dodo Payments disclosed unauthorized access to its self-hosted Metabase analytics system in August 2026. The incident involved CVE-2026-72898 but left payment processing unaffected.

    3 min read

  8. Fearless Wallet Security Review: Private Key Exposure in Polkadot Browser Extension After 20-Month Flaw

    Fearless Wallet browser extension leaked private keys via malicious code active from February 2025 through October 2026, affecting users across multiple versions.

    3 min read

  9. Railway Security Review: Environment Variables Exposure After October 2026 Incident

    Railway detected unauthorized access to encrypted environment variables in October 2026. The platform restored operations after remediation but requires users to rotate secrets.

    3 min read

  10. Studio review: Security analysis after the cloud environment breach

    Studio experienced unauthorized access to its cloud environment between September 30 and October 1, 2026, exposing form data and credentials for over 900,000 users.

    3 min read

  11. Klue security breach: OAuth tokens used to access Salesforce, HubSpot and other CRM systems

    In June 2026 attackers used a legacy credential to obtain Klue OAuth tokens and pull data from connected Salesforce, HubSpot, and other CRM environments.

    3 min read

  12. Claude Security review: Continuous Monitoring and Multi-Repository Tracking Update

    Anthropic released a Claude Security update on October 21, 2026, that adds continuous repository monitoring and automated fix tracking for Enterprise customers.

    3 min read