Tag: Credential Theft
Mass scans drain cloud keys from exposed Vite dev servers
Attackers are hammering internet-facing Vite development servers to pull AWS and Azure credentials and infrastructure state files.
A Twitch viewer add-on slipped 31,000 session tokens to a bot service
A viewer add-on with tens of thousands of installs sent live Twitch session tokens to a commercial bot operator.
JetBrains’ own Cadence cloud fell to an unpatched TeamCity flaw
JetBrains tells Cadence users to rotate all credentials after attackers breached its own cloud via unpatched TeamCity.
Thieves burn $600K in AI credits on stolen METR API key
AI safety nonprofit METR says attackers stole an API key and burned about $600,000 in model credits across two incidents.
GhostDesk malware rides fake CCleaner installers into Chrome
Malwarebytes finds a lookalike CCleaner site pushing a Chrome credential stealer.
Stolen AI gateway packages exposed secrets at 2,100 organizations
A CloudSEK dataset maps the March LiteLLM poisoning campaign to secret exposure at thousands of organizations.
Snowflake extortion suspect admits theft from 165 companies
Connor Riley Moucka admitted his role in the 2024 Snowflake raids that exposed records tied to more than 100 million…
Self-propagating npm worm poisons 400-plus packages via stolen tokens
The Mini Shai-Hulud worm stole publisher credentials, republished tainted packages, and burrowed into AI coding tools.