Promote Sign in Sign up

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack

Eduard Kovacs SecurityWeek 2026-09-11 20:48 11 views

Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking. The post Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack appeared first on SecurityWeek.

Read original: https://www.securityweek.com/trezor-says-347000-users-received-phishing-emails-after-brevo-hack/

My Favorites →

← Previous 7 Lessons from Building a Non-Custodial Crypto Checkout Next → Introducing automatic remediation policies with Cloudflare CASB

Your Fine-Grained GitHub Token Gets 404, Not 403. Check These Four Things Before the URL.

Your script calls the GitHub API with a fine-grained personal access token and gets 404 Not Found on a repository you can open in the browser. The URL is right. The repository exists. You will spend the next twenty minutes checking the URL anyway. Stop. With fine-grained tokens, 404 usually means n

Security 09-13 6 DEV Community

I Found an Undocumented MCP Server on OpenSea — and It Leaked Usernames for Any Wallet

TL;DR: OpenSea runs an undocumented MCP server at mcp.opensea.io/mcp. One of its tools hands out API keys to anyone who asks, and another lets you resolve any Ethereum address with an OpenSea profile to its owner's username. Reported to Bugcrowd, now sharing the story and a free recon kit.

Security 09-13 8 Dev.to (EN Zone)

Missing RLS: The Most Underrated Breach Cause of 2026

You know why there are so many breaches in databases? Perfect, me neither. Let's find out in a few minutes. Everyone worries about encryption. Almost nobody worries enough about the one thing that's actually been breaking production databases all year: a table with Row Level Security simply left of

Security 09-13 6 DEV Community

Your Smart TV May Be Screenshotting Your Screen Every Half Second

What the research found A 2024 study by researchers at UC Davis, University College London, and Universidad Carlos III de Madrid audited the network traffic leaving Samsung and LG smart TVs, examining a tracking method called Automatic Content Recognition, or ACR. ACR works like Shazam for your te

Security 09-13 11 DEV Community

Comments0

No comments yet — be the first