Skip to content

Search results for «Supply Chain Risks»

  1. TeamUpdraft Review: UpdraftCentral Keys Breach Highlights Supply-Chain Risks for WordPress Sites

    The October 2026 breach of teamupdraft.com exposed connection keys that attackers used to install backdoors on an estimated 400,000 WordPress sites running UpdraftPlus.

    3 min read

  2. ConnectWise Cloud Backup review: Supply-chain attack compromises Microsoft 365 tenants

    A compromised credential in ConnectWise Cloud Backup allowed unauthorized Microsoft Graph access across customer tenants in mid-October 2026.

    3 min read

  3. ConnectWise Security Review: Supply-Chain Incident Impact on Microsoft 365 Tenants

    The October 2026 compromise of ConnectWise Cloud Backup credentials allowed unauthorized access to 162–173 Microsoft 365 tenants. This review details the timeline, permissions abused, and recommended actions.

    3 min read

  4. Brevo Security Review: Lessons from SSO and Supply-Chain Incidents

    Two September 2026 incidents exposed authorization gaps in Brevo’s SSO and a hardcoded Cloudflare credential. The platform restored service quickly, yet the events underscore script and credential risks for email marketing users.

    3 min read

  5. Klue security breach: OAuth tokens used to access Salesforce, HubSpot and other CRM systems

    In June 2026 attackers used a legacy credential to obtain Klue OAuth tokens and pull data from connected Salesforce, HubSpot, and other CRM environments.

    3 min read

  6. ConnectWise Security Review: China-Linked AI Attack Hits MSP Cloud Backup Customers

    ConnectWise disclosed unauthorized access to Cloud Backup app identities in mid-October 2026. The incident involved China-linked actors using an AI framework against Microsoft 365 tenants managed by MSPs.

    3 min read

  7. Ledger review: Southeast Asia reseller tampering leads to estimated $90M losses

    An organized group inserted implants into Ledger Nano X devices sold through Malaysian reseller CryptoBilis, draining an estimated $86M to $93M from user wallets.

    3 min read

  8. OVHcloud CLI review: Security Risks from the October 2026 Malicious Release

    Attackers replaced OVHcloud CLI binaries for versions v0.11.0 to v0.15.0 on October 19, 2026. The incident exposed users to an information-stealing payload that targeted cloud credentials and SSH keys.

    3 min read

  9. Ymirlink review: Cuenote FC data protection after credential theft incident

    Ymirlink reported unauthorized access to its Cuenote FC email service on October 19, 2026, with attackers obtaining staff credentials and exfiltrating an estimated 9 million records.

    3 min read

  10. Ledger Security Review: Assessing Hardware Wallet Risks After Southeast Asia Tampering Incident

    Ledger security review covers the 2026 Southeast Asia reseller tampering incident, implant mechanism, confirmed losses, and updated purchase guidance for hardware wallet users.

    4 min read

  11. Klue Security Review: OAuth Token Breach and Salesforce Data Risks

    Klue suffered a supply-chain OAuth token theft in June 2026 that exposed Salesforce CRM data for hundreds of organizations. The platform contained the incident within a day, with no access to its core customer content.

    3 min read

  12. Ledger wallet security risks emerge from CryptoBilis tampering incident

    Tampered Ledger devices sold through CryptoBilis resulted in substantial fund drains in Southeast Asia. Official channels and direct purchases showed no involvement.

    3 min read