A reused password and a development cloud tenant cost Nikkei 150,000 people their personal details.
A poisoned npm release of Tensorlake's SDK carried a payload that hunts cloud credentials and can wipe a home directory.
Truffle Security found more than half a million still-valid credentials exposed in public GitHub repositories.
Researchers discovered the NadMesh botnet, which targets exposed AI infrastructure to steal cloud keys and Kubernetes tokens.
Over 700 education and technology websites were hijacked in a large ClickFix malware campaign, while new phishing attacks targeted LinkedIn…