seen from T1
seen from United Kingdom
seen from United Kingdom
seen from United States
seen from United States
seen from United States
seen from China
seen from United States
seen from Russia
seen from Germany
seen from China
seen from United States
seen from Malaysia
seen from United States
seen from Türkiye
seen from China
seen from Algeria
seen from China
seen from China
seen from United States
Study Finds AI Giants Leaking Secrets Across GitHub
Researchers discovered that two-thirds of top private AI companies have leaked sensitive credentials on GitHub, revealing major gaps in how fast-growing AI firms secure their development pipelines.
Source: Wiz
Read more: CyberSecBrief
AI Toy Accidentally Exposed Tens of Thousands of Children’s Chats
A misconfigured cloud console left private conversations between kids and an AI toy openly accessible to anyone with a Gmail account.
Source: Wired
Read more: CyberSecBrief
Instagram Bug Triggers Password Reset Chaos
A flaw allowed attackers to trigger Instagram password reset emails, colliding with the resurfacing of scraped user data affecting millions of accounts.
Source: SecurityWeek
Read more: CyberSecBrief
Gitea Vulnerability Exposes Private Container Images Without Authentication
A critical flaw in Gitea’s container registry, CVE-2026-27771, allows unauthenticated attackers to access private OCI images, exposing source code, credentials, and infrastructure data. The issue potentially affects tens of thousands of deployments across multiple regions.
Source: Orca Security
Read more: CyberSecBrief
Beer Festival Wristbands Leak Visitor Photos
A flaw in Carlsberg’s event wristbands let anyone guess URLs and view visitors’ names, photos, and videos without authorisation.
Source: Pentest Partners
Read more: CyberSecBrief
MongoBleed Vulnerability Exposes MongoDB Server Memory
A critical flaw in MongoDB's Zlib compression component, CVE-2025-14847, allows attackers to expose sensitive data by leaking server memory, posing a major risk to unpatched instances.
Source: Aikido Security
Read more: CyberSecBrief
VPN Browser Extensions Harvest AI Chats
Popular VPN extensions secretly logged and sold users’ AI conversations, exposing sensitive prompts and responses from millions of unsuspecting users.
Source: Koi Security
Read more: CyberSecBrief
