/
criticity:high × latest_source_host:bleepingcomputer.com × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · high

OVHcloud CLI releases 0.11.0-0.15.0 backdoored on GitHub after developer account hijack, stealing secrets from disk

OVHcloud disclosed that attackers hijacked a developer's GitHub account and used it to modify the open-source OVHcloud CLI repository, publishing trojanized releases 0.11.0 through 0.15.0 that carry information-stealing malware. According to CEO Octave Klaba, the malicious release appeared at 14:47 on October 19 and was detected and block…

GlassWorm technology cloud services
bleepingcomputer.com · high

OpenCode breach exposes users' linked AI provider API keys during large-scale distillation attack, causing unauthorized charges

The open-source AI coding agent OpenCode disclosed a breach tied to a "large-scale distillation attack" that exposed stored external-provider API keys for 1.4% of OpenCode Console users. Affected users had linked providers such as Anthropic, OpenAI and Google. Users reported unauthorized charges ranging from several hundred USD to more th…

technology software development