A compromise of Gyazo's upload servers handed attackers a database of account records and hundreds of millions of image identifiers.
An agent found a flaw, logged in and edited personal records without anyone directing it there.
CenterPoint Energy confirmed a breach after a hacker said a poorly defended API let him pull millions of customer lines…
A shared platform serving 23 ministries was breached through an unpatched VPN, with disclosure coming 78 days after detection.
Canada's Telus says attackers used stolen credentials to reach customer records over more than a year.
A forged request sent from inside a real government domain was enough to pull identity documents, selfies, and Bitcoin histories…
A flaw in Brevo's single sign-on handling let an attacker blast phishing mail to 347,000 Trezor customers.
A June intrusion at the medical equipment network reached patient and insurance data.