Tag: cloud security
Mass scans drain cloud keys from exposed Vite dev servers
Attackers are hammering internet-facing Vite development servers to pull AWS and Azure credentials and infrastructure state files.
Wiz finds one in ten LiteLLM servers trust the sample admin key
Thousands of exposed AI gateways accept the demo key printed in LiteLLM's setup guide.
Brazil crime group Slim Spider drains wallets through cloud key theft
CrowdStrike details Slim Spider, a Brazil-based group stealing crypto custody secrets from financial clouds.
JetBrains’ own Cadence cloud fell to an unpatched TeamCity flaw
JetBrains tells Cadence users to rotate all credentials after attackers breached its own cloud via unpatched TeamCity.
Thieves burn $600K in AI credits on stolen METR API key
AI safety nonprofit METR says attackers stole an API key and burned about $600,000 in model credits across two incidents.
ServiceNow ships fixes for three perfect-10 AI platform flaws
Three maximum-severity bugs in the ServiceNow AI Platform can be exploited without authentication.
Perfect-ten Entra ID bug was exploited before Microsoft closed it
Microsoft says the maximum-severity Entra ID flaw is fully mitigated and needs no customer action.
Metabase cloud hit first in CVSS 10 zero-day campaign
Attackers used an unknown Metabase flaw to grab admin access and customer data before a patch shipped.