ChangeNOW Resolves Website Vulnerability, Launches NOW AI for Enhanced Security

Cryptopotato

ChangeNOW Resolves Website Vulnerability, Launches NOW AI for Enhanced Security

First seen 16 Oct 2026, 13:38 UTC • •21.9

Article Content

1 / 3

Browse articles

ThreatCluster •October 16, 2026 at 13:39 UTC

•ChangeNOW fixed a website integration vulnerability with no confirmed exploitation.
•Customer data potentially exposed includes email addresses and transaction details.
•NOW AI is being launched to enhance security measures across ChangeNOW products.

On October 15, 2026, ChangeNOW announced the resolution of a vulnerability affecting its website integrations, discovered with the help of independent security researchers. Although there is no evidence of exploitation, the company warned clients about potential exposure of email addresses and transaction details. ChangeNOW emphasized that its transaction infrastructure remained unaffected and customer funds were secure. The company advised clients to be vigilant against suspicious messages that may reference real transactions. In response to this incident, ChangeNOW is launching NOW AI, a dedicated protection lab aimed at enhancing security across its products. More details about NOW AI will be shared on their website soon. ChangeNOW has been operational since 2017, providing a comprehensive platform for various crypto services.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 2h ago How this analysis works

Timeline

2026-10-15

Vulnerability discovered and fixed

ChangeNOW announced the resolution of a website integration vulnerability with the help of independent researchers.

More articles in this cluster (2)

Threat Graph

3 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Organization (1)

ChangeNOW

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Relationships

Data Breach related to ChangeNOW
Data Breach related to CWE-200 - Exposure of Sensitive Information

Following this threat?

Track ChangeNOW in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What specific data might have been exposed?

Potentially exposed data includes email addresses and transaction details, although no exploitation has been confirmed.

What should clients do to protect themselves?

Clients are advised to be cautious of unexpected messages and verify the sender before responding.

What is NOW AI?

NOW AI is a new protection lab being launched by ChangeNOW to enhance security standards across its products.

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…