Sicherheitsvorfall bei @cosme: Daten von 3 Millionen Mitgliedern geleakt
Teaser aus der Quelle
Istyle meldete am 2. November 2026 einen unbefugten Zugriff auf @cosme, bei dem Daten von etwa 3 Millionen Mitgliedern, darunter Benutzer-IDs, Nicknames, Namen, Postleitzahlen, Adressen, Telefonnummern, E-Mail-Adressen, Geschlecht, Geburtsdaten, Haut- und Haartypen, geleakt wurden. Login-Passwörter und Kreditkartendaten waren nicht betroffen. Istyle untersucht den Vorfall mit einem externen Sicherheitsunternehmen und hat bisher keine Missbrauchsfälle festgestellt.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei pwn.watch lesenMehr zu including
Weitere Advisories
- Ohne Bewertungosv:CLEANSTART-2026-QP21875Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Ohne Bewertungosv:CLEANSTART-2026-JY19705Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Ohne Bewertungosv:CLEANSTART-2026-TB63011Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- MittelCVE-2026-127207Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated low-privileged users, including Subscribers…
- HochCVE-2026-16135The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1. This is due to the plugin allowing arb…
- HochCVE-2026-13764The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is …
- HochCVE-2026-15309The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capabilit…
- Ohne Bewertungosv:CLEANSTART-2026-IM23671Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
Weitere News-Einträge
- Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2NewsThe Hacker News
- Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwideNewsBleepingComputer
- New N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedNewsBleepingComputer
- Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication BypassNewsThe Hacker News
- AI found Linux kernel bugs that remained undetected for decadesNewsCSO Online
- Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' DataNewsThe Hacker News
- GreyNoise AI Cyber Index: Benchmarking AI Models on Defensive CapabilitiesNewsGreyNoise
- Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege EscalationNewsThe Hacker News
Quelle: https://pwn.watch/i/istyle-cosme-member-data-breach-3m-nov-2026
ID