Threat Intelligence Brief
Curated summary with source attribution
Source: cybernews.com
Threat Risk: High
Victim: Gyazo users
Incident: Data breach caused by a vulnerability in an image upload server.
Impact: Unauthorized disclosure of 23.6 million user accounts and 490 million image metadata records.
Attacker: Unidentified threat actors
Analysis: Threat actors exploited a remote code execution flaw in Gyazo’s image upload server to gain unauthorized database access. The breach compromised sensitive PII, including password hashes and session tokens, potentially enabling account takeovers. The massive volume of metadata leaked also threatens the privacy of shared images.
Recommendations: Change Gyazo passwords immediately; Update passwords on any other services where the same credentials were reused; Review and revoke connected third-party account tokens
Source: Cybernews
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source
Latest Developments
Update — 2026-09-18 16:20 UTC
Data breach resulting from remote command execution on an image upload server. Theft of 23.6 million user records and 490 million image metadata entries. Attackers leveraged a command execution vulnerability on an image upload server to pivot into the backend user database. The breach includes sensitive authentication tokens and password hashes, which could facilitate large-scale account takeover attempts. Furthermore, the exposure of nearly 500 million metadata records potentially allows attackers to reconstruct and access private image URLs.
Corroborating source: securityweek.com