Fireworks discloses second security breach following third-party cloud attack