Amplitude customers using domain proxies should update their configuration immediately.

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-07-23 02:02 UTC
Importiert: 2026-07-23 03:15 UTC
Quelle-ID: full_disc
uid_hash: 3ef7247317e552ddc083697090d2bf89e2116f2a57f304fe65df6d4cb8809e21

Full Disclosure

Posted by shed riot on Jul 22 After receiving live analytics requests intended for api2.amplitude.com,

I contacted security () amplitude com and was invited to submit the issue

through Amplitude's private Bugcrowd programme.

In my view, Amplitude's handling of the report, including closing it as

"Not applicable" despite evidence of intercepted customer traffic, caused

by insecure configurations and documentation, constitutes a negligent

approach to...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss