/
attack_type:credential_theft × victim_sectors:technology × victim_sectors:cloud × limpar

Resultados

3 casos · pág. 1/1

bleepingcomputer.com · · 3 fontes · 3 atualizações high

Railway PaaS breach exposes customer environment variables and secrets; deployments paused, wallets drained, all users told to rotate keys

Railway, a Platform-as-a-Service provider, disclosed "anomalous activity" on the systems that store customer environment variables. An unauthorized third party may have accessed encrypted variables and, in some cases, obtained the decrypted contents (thehackernews.com, techcrunch.com, bleepingcomputer.com). Railway detected the activity e…

technology cloud
thehackernews.com · high

ThreatsDay bulletin: Zeabur, PingCAP, Genesys and Andromeda breaches, Bluesky phishing, Laravel, GLPI and Eptura Archibus flaws

This weekly roundup covers a cluster of breaches, critical vulnerabilities and law-enforcement actions. Bluesky confirmed more than 4,500 accounts compromised in a phishing campaign using a fake government payment offer. Zeabur will shut down after a second breach this year that exposed over 3.2 million environment variable records and da…

CVE-2026-65162 CVE-2026-114509 CVE-2026-107186 technology cloud
bleepingcomputer.com · · 7 fontes · 8 atualizações critical

LiteLLM 1.107.0 trojanized on PyPI and Docker via stolen GitHub CLI tokens: infostealer and RCE backdoor through Python startup hooks

The LiteLLM release 1.107.0 (a widely used open source LLM proxy and AI gateway developed by BerriAI, about 23 million weekly downloads per theregister.com and gbhackers.com, or about 92 million monthly PyPI downloads per bleepingcomputer.com) was trojanized on PyPI on 21 October 2026 and carries a credential stealer (privcollect) plus a …

technology software