Osaka Data Breach Exposes 1M Emails via Arara Hack
The city of Osaka says more than 1 million email addresses of its online services users leaked after hackers breached Arara, the email delivery service used by its platform vendor TKC.
6 articles
The city of Osaka says more than 1 million email addresses of its online services users leaked after hackers breached Arara, the email delivery service used by its platform vendor TKC.
The University of Texas at Arlington confirmed that hackers stole personal information about students and employees in last month's attack. The Qilin ransomware gang, one of today's most active groups, claimed it.
Apiiro found 2,539 exposed credentials across nearly 2,000 public GitHub repositories and traced part of them to Claude Code, which saves secret-bearing commands in a settings file that gets committed with the code.
Security firm Claroc found that 35,578 of 37,571 apps built with Grok's app builder were open to anyone without signing in, and about one in ten held business or personal data.
Czech web automation platform Apify confirmed that an attacker accessed some customer data on November 9 and 10, using a stolen credential to reach more systems and accounts.
Hosting platform Railway said AI provider keys stored by customers were stolen in an October breach and used for an estimated $740,000 in unauthorized spending. It will pay the charges itself when a provider refuses a refund.