91APP

Headlines · 3

1. Oct 30
   91APP breach investigation finds ARTEX attack traces

   91APP said its investigation found traces of the open-source AI penetration-testing framework ARTEX in the systems targeted during the breach, according to iThome. The company attributed the main entry point to an unpatched vulnerability in the third-party Appsmith tool and said the incident could affect 1,329 brands and 4.798 million consumers. These findings were company disclosures summarized in a single security roundup.

   iThome 台湾 · 🔥 0
2. Oct 27
   ARTEX Traces Found in 91APP Intrusion in Taiwan

   91APP’s investigation found traces of the ARTEX automated attack tool during an intrusion into its internal network and Commerce Cloud order database, according to iThome Taiwan. The attackers reportedly entered through an outdated Appsmith installation, retrieved database keys from GitLab, and accessed one order database; 91APP says credit-card information was not involved and is still determining the full scope.

   iThome 台湾 · 🔥 0
3. Oct 23
   91APP breach traced to ARTEX and unpatched Appsmith flaw

   91APP’s 18-day investigation found traces of the AI-powered ARTEX penetration-testing system in its environment and identified an unpatched Appsmith vulnerability as the main intrusion path. The investigation found that one Commerce Cloud order database was accessed and that order information, but not credit-card payment details, was involved; the intrusion was blocked on October 14. 91APP removed the compromised tool, rotated credentials and tokens, rebuilt GitLab permissions, and restricted CI-host and database-network connections, while the affected brands, member count, and exact data scope remained under investigation.

   iThome 台湾 · 🔥 0

Experience and discussion from the community

Share my 91APP experienceAsk about 91APP