AI Tool ARTEX Used in Breaches at WorkOS and Chainstack
November 4, 2026
WorkOS and Chainstack disclosed intrusions tied to the ARTEX AI framework, exposing sales contacts, customer accounts and password hashes at
Data Security
AI Tool ARTEX Used in Breaches at WorkOS and Chainstack
WorkOS and Chainstack disclosed intrusions tied to the ARTEX AI framework, exposing sales contacts, customer accounts and password hashes at the two firms.
mSecure Tells Users to Reset Passwords Without Saying Why
mSecure's developer emailed customers to change passwords, reset 2FA and remove passkeys after suspicious activity, but has not explained what happened.
24,664 Lovable-Built Apps Leak Passports and Chat Messages
Crissy Field found 24,664 Lovable-built apps on Supabase returning database records with no authentication, exposing passports, payments and chat messages.
BTCPay Server Hot Wallets Drained on Outdated Instances
Attackers drained Bitcoin and Litecoin hot wallets on BTCPay Server instances running version 2.4.1 or older, and the project urges updating to 2.4.7.
Trigger.dev Breach Exposes Customer Environment Variables
Trigger.dev disclosed that an attacker accessed environment variables belonging to a subset of its cloud customers, which can hold API keys and credentials.
Dell Fixes 44 PowerStore Flaws in DSA-2026-479, Seven Rated 9.8
Dell's DSA-2026-479 patches 44 PowerStore vulnerabilities, including seven rated CVSS 9.8 in the SDNAS file services layer. Upgrade to OS 5.1.0.0-2798105.
Researcher Finds 26,400 Live Cloud and AI Keys on Gitee
Researcher Ben Zimmermann scanned 7.25 million public Gitee repositories and found about 26,400 working cloud and AI credentials, led by Alibaba Cloud keys.
GM Pays $220 Million to Settle 36-State Driver Data Suit
General Motors agreed to pay $220 million to 36 state attorneys general over the sale of driver location and driving data to brokers that resold ...
Dell Patches Four Unauthenticated CVSS 9.8 Data Domain Flaws
Dell advisory DSA-2026-416 fixes 48 Dell-specific PowerProtect Data Domain flaws, including four unauthenticated CVSS 9.8 bugs allowing root command execution.
Hacktivists Leak Data on 41,000 DHS Staff, Claim Okta SSO Breach
A leak site carries internal data on more than 41,000 DHS employees and contractors. The Department of Peace claims an Okta SSO source; Okta denies ...
mSecure Tells Users to Reset Passwords Without Saying Why
November 4, 2026
mSecure’s developer emailed customers to change passwords, reset 2FA and remove passkeys after suspicious activity, but has not explained what
24,664 Lovable-Built Apps Leak Passports and Chat Messages
November 4, 2026
Crissy Field found 24,664 Lovable-built apps on Supabase returning database records with no authentication, exposing passports, payments and chat messages.
BTCPay Server Hot Wallets Drained on Outdated Instances
November 3, 2026
Attackers drained Bitcoin and Litecoin hot wallets on BTCPay Server instances running version 2.4.1 or older, and the project urges
Trigger.dev Breach Exposes Customer Environment Variables
November 3, 2026
Trigger.dev disclosed that an attacker accessed environment variables belonging to a subset of its cloud customers, which can hold API
Dell Fixes 44 PowerStore Flaws in DSA-2026-479, Seven Rated 9.8
November 2, 2026
Dell’s DSA-2026-479 patches 44 PowerStore vulnerabilities, including seven rated CVSS 9.8 in the SDNAS file services layer. Upgrade to OS
Researcher Finds 26,400 Live Cloud and AI Keys on Gitee
October 30, 2026
Researcher Ben Zimmermann scanned 7.25 million public Gitee repositories and found about 26,400 working cloud and AI credentials, led by
GM Pays $220 Million to Settle 36-State Driver Data Suit
October 30, 2026
General Motors agreed to pay $220 million to 36 state attorneys general over the sale of driver location and driving
Dell Patches Four Unauthenticated CVSS 9.8 Data Domain Flaws
October 29, 2026
Dell advisory DSA-2026-416 fixes 48 Dell-specific PowerProtect Data Domain flaws, including four unauthenticated CVSS 9.8 bugs allowing root command execution.
Hacktivists Leak Data on 41,000 DHS Staff, Claim Okta SSO Breach
October 29, 2026
A leak site carries internal data on more than 41,000 DHS employees and contractors. The Department of Peace claims an
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.