Skip to content

Search results for «API Protection»

  1. Studio security review: Cloud breach exposes form data and API keys

    Studio suffered unauthorized access to its cloud environment in late September 2026, exposing account details, stored form data, and third-party credentials for registered users.

    4 min read

  2. SourceNext Security Review: 22.5 Million Member Records Exposed Through API Abuse

    SourceNext disclosed an October 2026 breach where attackers abused an API to access up to 22.5 million member records. The incident highlights risks in member data systems and prompts password resets for users.

    3 min read

  3. Studio Security Review: Cloud Breach Exposes User Data and API Keys

    Studio suffered unauthorized cloud access from September 30 to October 14, 2026, exposing account data, form submissions, and third-party API credentials for over 900,000 users.

    3 min read

  4. OpenCode Security Review: API Key Exposure and User Protections

    The October 2026 incident exposed third-party AI API keys for a small subset of OpenCode Console users. Affected users received direct notices and should rotate keys immediately.

    3 min read

  5. Fearless Wallet Security Review: Private Key Exposure in Polkadot Browser Extension After 20-Month Flaw

    Fearless Wallet browser extension leaked private keys via malicious code active from February 2025 through October 2026, affecting users across multiple versions.

    3 min read

  6. Studio review: Security analysis after the cloud environment breach

    Studio experienced unauthorized access to its cloud environment between September 30 and October 1, 2026, exposing form data and credentials for over 900,000 users.

    3 min read

  7. Supabase Security Review: 16,000 Databases Found Publicly Readable

    Research from September 2026 found over 16,000 Supabase Postgres databases exposing tables publicly, mostly due to missing Row Level Security policies.

    3 min read

  8. LiteLLM Security Review: Supply Chain Compromise Through Malicious Package

    A malicious LiteLLM release on October 21, 2026, exposed users to credential theft via infected PyPI packages and Docker images. Organizations must audit deployments and rotate keys immediately.

    3 min read

  9. Crime Stoppers data breach exposes 1.5 million Canadian tips via P3 Global Intel

    A March 2026 hack of P3 Global Intel exposed over 1.5 million Canadian Crime Stoppers tips spanning decades, with roughly half containing PII.

    3 min read

  10. SBI Data Breach Review: 3,897 Customer Records Found on Dark Web

    State Bank of India confirmed that 3,897 customer records containing PII appeared on the dark web after alerts from CERT-In and the Defence Cyber Agency.

    3 min read

  11. ConnectWise Cloud Backup review: Supply-chain attack compromises Microsoft 365 tenants

    A compromised credential in ConnectWise Cloud Backup allowed unauthorized Microsoft Graph access across customer tenants in mid-October 2026.

    3 min read

  12. Supabase Security Review: Misconfigured Databases Expose 16,000+ Records

    Analysis of 16,326 Supabase databases with public tables containing PII and authentication tokens, traced to customer misconfigurations rather than a platform breach.

    4 min read