Xsolis Data Breach Impacts 1.4 Million People
2026-06-23T14:51:45Z•70be3c62c7148c460b31ee696f5070c68af1dc84f178f5ffb97491bca2e2d730
2fa-theftCVE-2026-47729bootrom-exploitcredentials-theftdata-breachfortigatemalwarememory-leakproxy-vulnerabilityremote-accessrouter-compromisesupply-chainunpatchable-exploitwhatsapp-malware
What happened
A batch of high-impact incidents: Xsolis disclosed a phishing-driven data breach affecting ~1.4M individuals; Texas Parks & Wildlife revealed a third-party vendor breach impacting ~3M people. A supply-chain compromise of ShapedPlugin Pro backdoored plugin updates to harvest credentials and 2FA secrets. Calif.io researchers disclosed Squidbleed (CVE-2026-47729), a 29‑year‑old Squid Proxy memory overread that can leak credentials and HTTP data. Kaspersky detailed a WhatsApp-based campaign that installs remote admin tools; SOCRadar expanded reporting on FortiBleed, a massive credential-harvesting
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 70be3c62c7148c460b31ee696f5070c68af1dc84f178f5ffb97491bca2e2d730
- Enrichment time
- 2026-06-23T14:51:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.