A recent security breach on OneLogins Secure Notes service could have allowed hackers to read cleartext notes containing authentication credentials, admin passwords, and even software keys stored by its customers. The vulnerability involved exploitation of a bug that allowed user notes to be visible in. Cleartext before being encrypted by several layers of AES-256. The company has already started collaborating with an external security company in investigating the issue and has begun working with the small subset of affected users.”]

