Gyazo breach exposes 23.6M user records via server flaw

Japanese software company Helpfeel confirmed a data breach on its screenshot-sharing platform Gyazo, affecting 23.6 million user records. Attackers exploited a server vulnerability. The weekly roundup also covers the TASK#STOMP backdoor, Zyxel and Check Point attacks, and the Elsevier domain hijack.

• Helpfeel confirmed a breach exposing 23.6M Gyazo user records
• A server vulnerability was the cause of the screenshot platform breach
• TASK#STOMP backdoor steals Wi-Fi passwords, screenshots and documents
• Nearly 1000 Zyxel switches hit across 48 countries (CVE-2026-7273)