[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJZevBdFAbIUImlRGqTrK9HSWaYFDeLm908Hi41dVijs":3},{"article":4,"iocs":41,"watch_terms":45,"solutions":46,"lesson":136},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"7d3a2af4-2203-4b66-95c7-fd21c7436b02","Gyazo server flaw exploited to steal 23.6 million user records","gyazo-server-flaw-exploited-to-steal-23-6-million-user-records-2d1da8","The Gyazo image-sharing platform has confirmed it suffered a data breach after hackers exploited a server vulnerability that allowed them to steal 23.6 million user records. [...]","The image-sharing platform Gyazo has confirmed a data breach resulting from a server vulnerability that allowed attackers to steal 23.6 million user records. The incident, which occurred on September 11, 2026, led to the exposure of names, email addresses, password hashes, and other user data. Gyazo has taken its service offline for maintenance and is notifying affected users while investigating with external experts and authorities.","Gyazo confirms data breach after server flaw exploited, exposing 23.6 million user records.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fgyazo-server-flaw-exploited-to-steal-236-million-user-records\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F09\u002F18\u002Fgyazo.jpg","2026-09-18T16:00:38+00:00","2026-09-18T18:00:09.074405+00:00",8,[17,20],{"name":18,"type":19},"Gyazo","product",{"name":21,"type":22},"Helpfeel","vendor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[42],{"type":43,"value":18,"context":44},"malware","Image-sharing platform affected by data breach",[21,18],{"controls":47,"vendors":135},[48,77,106],{"slug":49,"name":50,"problem":51,"products":52},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[53,61,69],{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":78,"name":79,"problem":80,"products":81},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[82,90,98],{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"slug":107,"name":108,"problem":109,"products":110},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[111,119,127],{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"rubrik","Rubrik","\u002Fvendor-logos\u002Frubrik.png","zero-trust-data-protection","Rubrik Zero Trust Data Protection","https:\u002F\u002Fwww.rubrik.com\u002Fproducts\u002Fdata-protection","Air-gapped, immutable backup for on-premises, cloud and SaaS data, with threat detection in backups and orchestrated recovery.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"commvault","Commvault","\u002Fvendor-logos\u002Fcommvault.png","commvault-cloud","Commvault Cloud","https:\u002F\u002Fwww.commvault.com\u002Fplatform","Backup and recovery platform with immutable storage and recovery testing.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",[],{"slug":137,"title":138,"body":139,"framework_refs":140,"framework_notes":153},"server-vulnerability-exposes-236-million-gyazo-user-records","Server Vulnerability Exposes 23.6 Million Gyazo User Records","A known server vulnerability on Gyazo's platform was exploited by attackers, resulting in the theft of 23.6 million user records including names, email addresses, and password hashes. The root cause points to a failure in timely vulnerability identification and remediation on an internet-facing, high-value asset. Storing sensitive user data — particularly password hashes — without adequate surrounding controls amplified the damage significantly. This incident underscores that unpatched server vulnerabilities on public-facing platforms are prime targets and that delays in detection and response directly increase the scale of harm. Platforms handling millions of user credentials carry a heightened duty to maintain rigorous vulnerability management programs.",[141,142,143,144,145,146,147,148,149,150,151,152],"CIS Control 7 – Continuous Vulnerability Management","CIS Control 3 – Data Protection","CIS Control 8 – Audit Log Management","NIST SP 800-53 RA-5 – Vulnerability Monitoring and Scanning","NIST SP 800-53 SI-2 – Flaw Remediation","NIST SP 800-53 SC-28 – Protection of Information at Rest","NIST SP 800-63B – Digital Identity Guidelines (Password Storage)","GDPR Article 25 – Data Protection by Design and by Default","GDPR Article 33 – Notification of a Personal Data Breach to the Supervisory Authority","GDPR Article 34 – Communication of a Personal Data Breach to the Data Subject","OWASP Top 10 – A06:2021 Vulnerable and Outdated Components","ISO\u002FIEC 27001 – A.12.6.1 Management of Technical Vulnerabilities",{}]