Search results for «OAuth Breach»
-
Klue security breach: OAuth tokens used to access Salesforce, HubSpot and other CRM systems
In June 2026 attackers used a legacy credential to obtain Klue OAuth tokens and pull data from connected Salesforce, HubSpot, and other CRM environments.
-
Klue Security Review: OAuth Token Breach and Salesforce Data Risks
Klue suffered a supply-chain OAuth token theft in June 2026 that exposed Salesforce CRM data for hundreds of organizations. The platform contained the incident within a day, with no access to its core customer content.
-
Railway Security Review: Environment Variables Exposure After October 2026 Incident
Railway detected unauthorized access to encrypted environment variables in October 2026. The platform restored operations after remediation but requires users to rotate secrets.
-
ConnectWise Security Review: China-Linked AI Attack Hits MSP Cloud Backup Customers
ConnectWise disclosed unauthorized access to Cloud Backup app identities in mid-October 2026. The incident involved China-linked actors using an AI framework against Microsoft 365 tenants managed by MSPs.
-
Railway Security Review: Assessing the October 2026 Environment Variable Breach and Credential Risks
Railway disclosed a security incident on October 21, 2026, involving possible access to encrypted environment variables containing customer secrets. The company urged all users to rotate keys immediately.
-
AI Agents Security Review: Autonomous Tools Targeting Retailers and Developer Environments
Autonomous AI agents enabled financially motivated actors to breach over 100 companies in 2026 campaigns against retailers and developer platforms, often at costs under $50 per target.
-
ConnectWise Cloud Backup review: Supply-chain attack compromises Microsoft 365 tenants
A compromised credential in ConnectWise Cloud Backup allowed unauthorized Microsoft Graph access across customer tenants in mid-October 2026.
