Zeabur will shut down after a second breach exposes secrets
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Wednesday, October 21st, 2026.
Development platform Zeabur plans to close after its second security breach in two months. Attackers used leaked internal credentials stored in plaintext to reach shared hosting, dedicated servers, internal systems and the production database. The incident affected three hundred twenty one thousand eight hundred ten accounts and roughly 3.2 million environment-variable records across nine regions. Zeabur will disable renewals and pause shared services beginning December 1st, with its remaining infrastructure scheduled to close by year-end.
Customers now face both a security response and a forced migration. Zeabur said administrator tokens had no expiry and had not been rotated after the earlier breach. Administrative portals also remained publicly accessible. For leaders, the lesson is that incident recovery must address every credential and trust path, not only the systems first identified. For defenders, exposed secrets, sessions, servers and disk copies each require their own containment steps. Incomplete remediation can allow one breach to create the conditions for another.
Rotate every secret exposed to Zeabur, revoke active sessions, rebuild compromised servers and complete migration before the shutdown deadlines.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
