Search results for «SSO»
-
Brevo Security Review: Lessons from SSO and Supply-Chain Incidents
Two September 2026 incidents exposed authorization gaps in Brevo’s SSO and a hardcoded Cloudflare credential. The platform restored service quickly, yet the events underscore script and credential risks for email marketing users.
-
DodoPayments review: Security After Metabase SQL Injection Incident
Dodo Payments disclosed unauthorized access to its self-hosted Metabase analytics system in August 2026. The incident involved CVE-2026-72898 but left payment processing unaffected.
-
Onamae Desktop Cloud review: October 2026 VPS breach and compensation process
The Onamae Desktop Cloud breach allowed unauthorized access to Windows VPS instances used for FX trading, leading to data theft and unauthorized trades across more than 70 broker accounts.
-
Yamato Transport Breach Exposes Kuroneko Pay-Later Payment Data
Yamato Transport confirmed unauthorized access to its Kuroneko Pay-Later service in September 2026, resulting in the theft of millions of buyer and merchant records.
-
AfD data breach exposes hosting provider weaknesses in email security
The September 2026 hack of an AfD-linked hosting provider led to the exposure of hundreds of thousands of emails through an unpatched WordPress vulnerability.
-
Paradigm Healthcare Services review: Medi-Cal Billing Breach Analysis
A 2025 breach at Paradigm Healthcare Services exposed Medi-Cal member IDs for nearly one million people. Here is what the records show.
-
Klue security breach: OAuth tokens used to access Salesforce, HubSpot and other CRM systems
In June 2026 attackers used a legacy credential to obtain Klue OAuth tokens and pull data from connected Salesforce, HubSpot, and other CRM environments.
-
Crime Stoppers data breach exposes 1.5 million Canadian tips via P3 Global Intel
A March 2026 hack of P3 Global Intel exposed over 1.5 million Canadian Crime Stoppers tips spanning decades, with roughly half containing PII.
-
PingCAP Review: TiDB Cloud Breach Exposes 10.6 TB of Data
PingCAP's TiDB Cloud suffered a breach with 10.6 TB of data claimed stolen in October 2026. Official statements clarify what was and was not accessed.
-
PFCT review: P2P Lender Security After 2026 Data Breaches
PFCT and Mouda suffered separate cyberattacks on September 27, 2026, exposing personal data of over 19,000 individuals through server vulnerabilities.
-
Studio security review: Cloud breach exposes form data and API keys
Studio suffered unauthorized access to its cloud environment in late September 2026, exposing account details, stored form data, and third-party credentials for registered users.
-
OVHcloud CLI review: Security Risks from the October 2026 Malicious Release
Attackers replaced OVHcloud CLI binaries for versions v0.11.0 to v0.15.0 on October 19, 2026. The incident exposed users to an information-stealing payload that targeted cloud credentials and SSH keys.