/
latest_source_host:bleepingcomputer.com × criticity:critical × limpar

Resultados

3 casos · pág. 1/1

bleepingcomputer.com · · 2 fontes · 2 atualizações critical

TeamUpdraft breach exposes UpdraftCentral keys; attackers backdoor WordPress sites with 99 malicious plugins

TeamUpdraft, developer of UpdraftPlus, detected unauthorized access to teamupdraft.com over the weekend of 17-18 October 2026 and believes the attacker accessed its customer database. The database held customer and billing details, order history, two-factor authentication settings, and connection keys for UpdraftCentral, UpdraftVault and …

bleepingcomputer.com · critical

Zeabur breached twice in two months via leaked plaintext credentials; 321,810 accounts exposed, platform shutting down

Zeabur, a developer hosting and deployment platform, disclosed that on October 14-15, 2026 an attacker used leaked internal credentials stored in plaintext to compromise its shared clusters, some Dedicated Servers and internal systems, and ultimately read the production database. The breach affected shared clusters in nine regions, 321,81…

bleepingcomputer.com · critical

ConnectWise Cloud Backup (SkyKick) supply-chain attack abuses service principals to breach Microsoft 365 tenants

ConnectWise shut down its Cloud Backup service (formerly SkyKick Cloud Backup) after an attacker gained unauthorized access to application identities and used them to compromise Microsoft 365 tenants. Huntress identified at least 162 compromised tenants in its environment, and Microsoft Threat Intelligence characterized the incident as an…