/
attack_type:credential_theft × latest_source_host:darkreading.com × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

darkreading.com · high

Anthropic Claude Code Desktop 'SneakPeek' preview-pane flaw enables silent zero-click theft of developer credentials

A flaw dubbed SneakPeek in the preview pane of Anthropic's Claude Code Desktop can let adversaries quietly steal credentials from developers without any user interaction (zero-click). According to the report, exposed secrets include SSH private keys, AWS credentials and Claude OAuth tokens. The article excerpt provides no CVE identifier, …

darkreading.com · · 5 fontes · 5 atualizações high

OVHcloud CLI v0.11.0–v0.15.0 release assets swapped with secret-stealing binary via hijacked GitHub contributor account

On 19 October 2026 an attacker used a hijacked GitHub account of an OVHcloud contributor to overwrite the download archives of five existing OVHcloud CLI releases (v0.11.0 to v0.15.0) with a build designed to steal secrets from the disk of any machine that ran it (thehackernews.com, bleepingcomputer.com). The files were live for about 94 …