💥 BREACHES & INCIDENTS
- Heights Finance Breach Exposes Data of at Least 1.2 Million People
Heights Finance disclosed a breach affecting at least 1.2 million people.- Heights Finance customers, applicants, inquirers and former Curo Management borrowers are affected.
- Names, contact details, Social Security numbers, government IDs and financial account data may have been exposed.
- An unauthorized actor accessed a third-party cloud platform storing customer data on May 7, 2026.
- The incident did not affect Heights Finance loan-management systems or other networks.
📄 Source: heightsfinance.com · 📎 Coverage: securityweek.com · 👁 via SecurityWeek
🔓 CVEs & KEV
- CVE-2026-75481 — CVSS 8.7 — SkyPilot Admin Privilege Escalation (CVE-2026-75481)
📋 ADVISORIES
- 📄 Source for GitLab Patches Critical GraphQL Flaw Allowing Unauthenticated Project Deletion — docs.gitlab.com