Skip to content

Search results for «Key Compromise»

  1. Fearless Wallet Security Review: Private Key Exposure in Polkadot Browser Extension After 20-Month Flaw

    Fearless Wallet browser extension leaked private keys via malicious code active from February 2025 through October 2026, affecting users across multiple versions.

    3 min read

  2. eMudhra Review: Weak Private Keys Force Remediation Steps

    The October 2026 discovery of weak private keys in eight eMudhra intermediate CAs led to immediate revocations and the company's exit from global TLS issuance.

    3 min read

  3. eMudhra Review: Key Weakness Forces Exit from Global TLS Business

    Eight eMudhra intermediate CA keys generated with insufficient randomness led to immediate browser blocks and the company's withdrawal from global TLS issuance in October 2026.

    3 min read

  4. TeamUpdraft Review: UpdraftCentral Keys Breach Highlights Supply-Chain Risks for WordPress Sites

    The October 2026 breach of teamupdraft.com exposed connection keys that attackers used to install backdoors on an estimated 400,000 WordPress sites running UpdraftPlus.

    3 min read

  5. Master of Malt Security Review: BigCommerce App Key Breach Exposed Customer Data

    Master of Malt confirmed a customer data exposure in September 2026 after a compromised BigCommerce app key allowed access to names, emails, and addresses for roughly four days.

    3 min read

  6. Studio Security Review: Cloud Breach Exposes User Data and API Keys

    Studio suffered unauthorized cloud access from September 30 to October 14, 2026, exposing account data, form submissions, and third-party API credentials for over 900,000 users.

    3 min read

  7. Quest Diagnostics Review After Quanum LSM Patient Records Access Incident

    Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager system in October 2026, affecting certain patient records. The company paused access, completed remediation within days, and began required notifications.

    3 min read

  8. Railway Security Review: Environment Variables Exposure After October 2026 Incident

    Railway detected unauthorized access to encrypted environment variables in October 2026. The platform restored operations after remediation but requires users to rotate secrets.

    3 min read

  9. AfD data breach exposes hosting provider weaknesses in email security

    The September 2026 hack of an AfD-linked hosting provider led to the exposure of hundreds of thousands of emails through an unpatched WordPress vulnerability.

    3 min read

  10. Studio review: Security analysis after the cloud environment breach

    Studio experienced unauthorized access to its cloud environment between September 30 and October 1, 2026, exposing form data and credentials for over 900,000 users.

    3 min read

  11. Nikkei Data Breach Exposes 1.83 Million Records in Third Incident This Month

    Nikkei disclosed a cloud service breach on October 16, 2026, affecting 1.83 million records. This marks the third security incident in roughly one month.

    3 min read

  12. CoinDCX review: Wallet Incident Raises Questions on Deprecated Address Management

    This CoinDCX review details the October 2026 movement of nearly $16 million in USDT from deprecated addresses and assesses ongoing security practices.

    3 min read