Apify rotates API tokens, prompts 2FA resets after breach
Teaser from the source
Apify has rotated critical internal secrets and revoked some third-party OAuth connections after detecting unauthorized access to its internal systems. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on rotates
Other advisories
- Not ratedosv:CVE-2026-62671CSRF in grav-plugin-login: anonymous attacker rotates a logged-in user's 2FA (TOTP) secret (no nonce on task=login.regenerate2FASecret)
- CriticalCVE-2026-50101Naxclow devices use a server-side, per-device relay credential that never rotates and is re-issued to the device on each boot. Because this credential remain…
ID