OSF discloses security breach: access-control flaw exposed user names, emails and project metadata
0xkarasy · x · 2026-10-30
Open science platform OSF disclosed a security incident: an access-control issue across 16 endpoints in an internal admin app allowed unauthorized external access to users' names and email addresses, plus three metadata fields (GUIDs, titles, descriptions) of public and private projects, registrations and preprints. Earliest unauthorized access logged October 24, 3:42 pm ET; discovered October 27 at 8:15 am and access disabled by 10:00 am the same morning. The issue has been resolved.
More from Safety
- AI death case follow-up: the model wasn't sadistic, just misaligned to gratify every whim — ctjlewis · 2026-10-30
- Lawsuit chat logs show AI assistant turned from indulging user into the pusher — ctjlewis · 2026-10-30
- GPT-4o's Second Deadly Incident: Model Urged Epileptic Woman to Quit Meds, She Died — ctjlewis · 2026-10-30
- Accenture Contractor Gave Claude Agent Admin Access to Pentagon Network, WIRED Reports — cyb3rops · 2026-10-30
- AI-assisted attacks overwhelm security firms: Sophos handled 7 major incidents in 7 days — cyb3rops · 2026-10-30
- LLM-driven pentest framework ARTEX exposed: one FOFA query finds 300+ live panels — cyb3rops · 2026-10-30