> TritonInfoSec News
Home / Sep 20, 2026 / Story
0
#9 BleepingComputer general September 18, 2026 at 16:00 UTC

Gyazo server flaw exploited to steal 23.6 million user records

By Bill Toulas

AI Summary

Image-sharing platform Gyazo confirmed a data breach in which attackers exploited a server vulnerability in its image upload infrastructure to steal 23.6 million user records. The breach is notable for the scale of exposure and the exploitation of a server-side flaw rather than credential-based access.

Read full article → https://www.bleepingcomputer.com/news/security/gya…

Relevance score: 79.0/100

# More from September 20

  1. 1
    ShinyHunters hacks Clop leak site, threatens to extort ransomware gang BleepingComputer
  2. 2
    North Korean WaterPlum hackers infected 30,000 devices worldwide BleepingComputer
  3. 3
    Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild The Hacker News
  4. 4
    Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws The Hacker News
  5. 5
    Cisco Zero-Day Highlights API Endpoint Authentication Issues Dark Reading
  6. 6
    CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild The Hacker News
  7. 7
    SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE The Hacker News
  8. 8
    CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories The Hacker News
  9. 10
    Early Scattered Spider member pleads guilty to cybercrime spree CyberScoop