/
initial_access_vector:valid_accounts × victim_sectors:technology × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · critical

Zeabur breached twice in two months via leaked plaintext credentials; 321,810 accounts exposed, platform shutting down

Zeabur, a developer hosting and deployment platform, disclosed that on October 14-15, 2026 an attacker used leaked internal credentials stored in plaintext to compromise its shared clusters, some Dedicated Servers and internal systems, and ultimately read the production database. The breach affected shared clusters in nine regions, 321,81…

infosecurity-magazine.com · · 10 fontes · 12 atualizações critical

ConnectWise Cloud Backup (SkyKick) app credentials abused in Microsoft 365 supply-chain attack; ~1,000 tenants probed, services suspended

ConnectWise suspended Cloud Backup (formerly SkyKick), SaaS Security and Cloud Management after unknown actors gained unauthorized access to its application identities and used them to sign in to customers' Microsoft 365 tenants. ConnectWise says it identified the incident on October 14, 2026 (thehackernews.com) and began mitigations on O…