Sicherheitsvorfallpwn.watch
Blockchain-Datenanbieter Allium meldet unbefugten Zugriff, hebt alle API-Schlüssel auf
Teaser aus der Quelle
Allium, ein Blockchain-Datenanbieter, dessen Tools und APIs von Unternehmen wie Visa und Coinbase genutzt werden, gab am 28. Oktober 2026 bekannt, dass es am 25. Oktober unbefugten Zugriff auf einige seiner Systeme festgestellt hat. Die Allium App und der Explorer waren etwa zwei Tage offline. Nach der Wiederherstellung am 28. Oktober wurden bestehende API-Schlüssel aufgehoben, neue Passwörter erforderlich und MFA empfohlen. Zudem wurde das Hochladen und Lesen zuvor hochgeladener Daten deaktiviert, während Allium Assistant und der Allium MCP offline blieben. Betroffene Kunden wurden direkt benachrichtigt und ein unabhängiges Sicherheitsunternehmen untersucht den Vorfall.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei pwn.watch lesenMehr zu unauthorized
Weitere Advisories
- Ohne Bewertungosv:CVE-2026-105770Octo STS discloses trust policy contents to unauthorized callers via Exchange error messages
- Ohne Bewertungosv:CLEANSTART-2026-TJ33106vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace ...
- Ohne Bewertungosv:CLEANSTART-2024-YD39274Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2
- Ohne Bewertungosv:CLEANSTART-2024-AK19680Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access
- Ohne Bewertungosv:CLEANSTART-2026-VV62623HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries
- Ohne Bewertungosv:CLEANSTART-2026-XQ03978Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr
- MittelCVE-2026-83380Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web St
- MittelCVE-2026-87294Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.
Weitere News-Einträge
- Iris Ohyama data cloud breach exposes info of 7.7 million customersNewsBleepingComputer
- Japan Announces Emergency Cybersecurity Package Following a Wave of AttacksNewsSecurityWeek
- DigiCert data breach exposes customer information, identity documentsNewsBleepingComputer
- Chainstack Reports Production Systems Breach Exposing Customer Data and Password HashesNewsThe Hacker News
- Northflank security breach leads to abuse of customers' AI API keysNewsBleepingComputer
- Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity DataNewsThe Hacker News
- In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad securityNewsThe Register — Security
- WorkOS attributes Oct 30 internal GTM-tool access to a researcher's escaped ARTEX agent; CRM and conversation data exposedSicherheitsvorfallpwn.watch
Quelle: https://pwn.watch/i/allium-blockchain-data-unauthorized-access-oct-2026
ID