September 20, 2026
- Gyazo confirmed attackers exploited a flaw in its image upload server on 11 September and took approximately 23.62 million user records, plus 490 million image metadata records — the latter including image IDs usable to construct image URLs, upload IP addresses, User-Agent strings, EXIF location data, OCR-extracted text, source URLs, and hashed passphrases for private images. User records may include device IDs, login session IDs, X integration tokens and Google SSO email addresses. Operator Helpfeel detected the activity on 12 September, patched, and has taken the service offline; it says attackers also obtained a list identifying private images and cannot rule out that some were viewed. BleepingComputer · Breaches & Incidents
in Threat Actors Turn on Each Other as Gemini Walks Into Three Real Networks