Zeabur Breach Exposes 321,810 Accounts: What Customers Should Do Now https://www.esecurityplanet.com/threats/news-zeabur-breach-accounts-customer-response/
Search
6 results for “zeab”
-
The Zeabur platform shutdown is set for December 2026 after an attacker read 3.21 million environment variables and 321,800 accounts.
#Zeabur #DataBreach #CloudSecurity #GCP #AWS #APIKeys #DevOps #PlatformShutdown
https://securityonline.info/zeabur-platform-shutdown/?utm_source=mastodon&utm_medium=jetpack_social
-
Two businesses have suffered devastating breaches this week (well, three, if you count the screwup that brought all my sites down and lost data):
Vibe coding platform Zeabur collapses after back-to-back breaches expose 3.2M records:
https://cybernews.com/news/zeabur-cloud-provider-shutdown-two-breaches-3-million-records/Bengaluru-based eMudhra will exit the global website authentication certificate business after a security flaw left eight intermediate certification authority certificates vulnerable to potential misuse. The company's Indian digital signature and eSign services will continue to operate as usual.: https://www.ndtvprofit.com/technology/emudhra-exits-global-website-security-business-after-weak-keys-found-in-eight-certificates-12221008
@AdrianSanaba
-
I have to say October has been a good month for cybersecurity professionals job security...
- Railway - Potential exposure of customer environment variables and secrets.
- LiteLLM - Compromised v1.107.0 distributed credential-stealing malware through PyPI and Docker releases.
- Zeabur - Infrastructure breached, exposing internal credentials, customer secrets, and platform data.
- OpenCode - Console breach exposed users’ AI provider API keys.
- OVHcloud CLI - Official GitHub release binaries replaced with malicious versions.
- Rank Math PRO - Malware inserted into some official v3.0.123 plugin downloads.
- TeamUpdraft - Security breach exposed customer connection keys capable of accessing connected WordPress sites.
- ConnectWise - Compromised Cloud Backup credentials used to access customers’ Microsoft 365 environments.
- Tensorlake - Hijacked npm release distributed credential-stealing malware.
- SubQuery - Backdoored
@subql/commonnpm package stole credentials and enabled remote shell access. - GhostAction - Compromised GitHub repositories injected with malicious workflows targeting secrets.
- PHP - Critical remote code execution vulnerabilities prompted emergency security updates.
- Node.js - Security updates released for Node.js 22, 24, and 26, including dependency fixes.
- eMudhra - Private keys for eight intermediate certificate authorities compromised.
- Tailscale - Security update issued to distrust compromised eMudhra certificates; WireGuard node-to-node encryption remains unaffected.
-
#duckdb 2.0 is out. Now it's the real time go and use quack. 😁 Excellent work as always.