Real-time and post-mortem analysis of DeFi exploits, protocol breaches, and on-chain attacks: what happened and what it means.
Capcom’s October 2026 disclosure separates exposed account metadata, additional profile fields and unauthorized password changes. Lessons for identity testing....
Huntress’s ConnectWise investigation highlights app-only access, added credentials and the limits of user password resets in Microsoft 365 recovery....
The University of Copenhagen’s October breach highlights sensitive data in test systems and the need to assess encryption keys and access together....
DTU’s October disclosure describes unauthorized access to its identity system. Lessons for privilege boundaries, historical records and security evidence....
Genesys’s October update distinguishes affected internal LMS and CRM systems from its customer platforms. Security lessons for enterprise SaaS boundaries....
Ledger’s October explanation distinguishes tampered reseller devices from compromise of its chip or servers. Lessons for hardware distribution and secure enroll...
NEAR Intents disclosed a $3.8M exploit on 1 October and later reported returned funds. Lessons for integration invariants, safe suspension and retesting....
A sourced October 2026 incident collection covering Binance, Polymarket, AI credentials, cloud platforms and identity systems, with practical validation questio...
GMO’s Onamae Desktop Cloud disclosures describe malicious programs on some servers and later data publication. Lessons for hosted workload security....
OpenCode’s Console disclosure and the distinction between hosted and local keys. How enterprises can test AI credential custody and revocation....
The OVHcloud CLI release compromise shows why version pinning needs artifact verification, immutable releases and developer-secret recovery....
What Polymarket and DebugBear disclosed in October 2026, what CZ’s injection claim establishes, and how to test browser-side trust boundaries....