3 casos · pág. 1/1
An actor using the handle Erich claims to have breached an unnamed conference-space company with an estimated $80-100 million in annual revenue. The actor says the compromise came through a support panel and that access is still active. The post cites 24,753 tickets, 387,388 comments, 274,294 system notes, 113,094 real replies, 115,948 at…
Hakai Security released Chupabase, a Python tool that finds and demonstrates insecure Supabase backend configurations in applications generated by the vibe coding platform Lovable. It parses the app's JavaScript bundles (and the sw.js Service Worker precache manifest) to recover the Supabase URL, the public anonKey and the API endpoint ma…
A multinational advisory (CISA, NSA, FBI, AIVD, MIVD, NCSC-UK and others) warns that the Russian state-supported APT LAUNDRY BEAR (aka Void Blizzard, TA488) has compromised Western government, defense industrial base and NGO organizations running Zimbra Collaboration Suite (ZCS) since at least July 2025. The campaign uses a view-based XSS…
