Skip to content

Search results for «Security Breach»

  1. 302.ai Review: Security Risks After Azure Storage Leak

    The 302.ai data exposure involved 17.6 million files from a misconfigured Azure bucket. This review details the incident and practical steps for users.

    2 min read

  2. DodoPayments review: Security After Metabase SQL Injection Incident

    Dodo Payments disclosed unauthorized access to its self-hosted Metabase analytics system in August 2026. The incident involved CVE-2026-72898 but left payment processing unaffected.

    3 min read

  3. Capcom ID review: Security After 11.7 Million Account Breach in October 2026

    Capcom ID suffered unauthorized access to 11.7 million accounts in October 2026. This review details exposed data types and company response.

    3 min read

  4. Fearless Wallet Security Review: Private Key Exposure in Polkadot Browser Extension After 20-Month Flaw

    Fearless Wallet browser extension leaked private keys via malicious code active from February 2025 through October 2026, affecting users across multiple versions.

    3 min read

  5. Railway Security Review: Environment Variables Exposure After October 2026 Incident

    Railway detected unauthorized access to encrypted environment variables in October 2026. The platform restored operations after remediation but requires users to rotate secrets.

    3 min read

  6. AfD data breach exposes hosting provider weaknesses in email security

    The September 2026 hack of an AfD-linked hosting provider led to the exposure of hundreds of thousands of emails through an unpatched WordPress vulnerability.

    3 min read

  7. Studio review: Security analysis after the cloud environment breach

    Studio experienced unauthorized access to its cloud environment between September 30 and October 1, 2026, exposing form data and credentials for over 900,000 users.

    3 min read

  8. OpenCode Security Review: API Key Exposure Following Distillation Attack

    A distillation attack on October 17, 2026, exposed third-party API keys for a small percentage of OpenCode Console users. Affected accounts should rotate keys and review billing activity immediately.

    3 min read

  9. Klue security breach: OAuth tokens used to access Salesforce, HubSpot and other CRM systems

    In June 2026 attackers used a legacy credential to obtain Klue OAuth tokens and pull data from connected Salesforce, HubSpot, and other CRM environments.

    3 min read

  10. Zeabur Security Review: Environment Variable Exposure in Two 2026 Breaches

    Two security incidents in 2026 exposed millions of environment variables on Zeabur before the platform announced its full shutdown by December 31.

    3 min read

  11. Supabase Security Review: 16,000 Databases Found Publicly Readable

    Research from September 2026 found over 16,000 Supabase Postgres databases exposing tables publicly, mostly due to missing Row Level Security policies.

    3 min read

  12. ConnectWise Security Review: China-Linked AI Attack Hits MSP Cloud Backup Customers

    ConnectWise disclosed unauthorized access to Cloud Backup app identities in mid-October 2026. The incident involved China-linked actors using an AI framework against Microsoft 365 tenants managed by MSPs.

    3 min read