Apify rotates API tokens, prompts 2FA resets after breach

Apify has rotated critical internal secrets and revoked some third-party OAuth connections after detecting unauthorized access to its internal systems. [...]

Data Breach Identity & Access Security
Read the full article at BleepingComputer Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
SOCRadar

ARTEX: 916 Exposed AI Pentest Consoles Mapped in the U.S.

ARTEX is an open-source, LLM-driven autonomous penetration-testing framework, and its web console is now deployed at scale on U.S. commercial hosting. Starting from internet-wide scanner telemetry, SOCRadar researchers merged and de-duplicated 1,295 U.S.-hosted candidate instances, re-validated each one, and confirmed 916 live ARTEX-family consoles in a snapshot taken on November 11, 2026. The software was […]

CERT/CC Vulnerability Notes

VU#944667: ComfyUI-Easy-Use contains unauthenticated path traversal vulnerability

Overview ComfyUI-Easy-Use version 1.3.6 contains a vulnerability in its save_preview() handler that allows an unauthenticated attacker to overwrite an installed custom node’s Python file. An attacker who can reach the affected ComfyUI instance over the network can use the overwrite to execute arbitrary code when ComfyUI restarts. Description ComfyUI is a node-based interface for building generative AI workflows. Comf…