/
data_types_exposed:credentials × latest_source_host:bleepingcomputer.com × limpar

Resultados

6 casos · pág. 1/1

bleepingcomputer.com · high

UNC7017 hijacks AOMEI Backupper update servers to deliver CROSSROAD downloader and SHINYROAD backdoor

Between April and July 2026, a threat actor tracked as UNC7017 compromised AOMEI update and notification infrastructure and used it to push malware to users of AOMEI Backupper. The attackers briefly altered two configuration files and restored them within minutes to evade detection. The campaign was uncovered by ManageEngine's Threat Anal…

bleepingcomputer.com · high

OVHcloud CLI releases 0.11.0-0.15.0 backdoored on GitHub after developer account hijack, stealing secrets from disk

OVHcloud disclosed that attackers hijacked a developer's GitHub account and used it to modify the open-source OVHcloud CLI repository, publishing trojanized releases 0.11.0 through 0.15.0 that carry information-stealing malware. According to CEO Octave Klaba, the malicious release appeared at 14:47 on October 19 and was detected and block…

bleepingcomputer.com · high

OpenCode breach exposes users' linked AI provider API keys during large-scale distillation attack, causing unauthorized charges

The open-source AI coding agent OpenCode disclosed a breach tied to a "large-scale distillation attack" that exposed stored external-provider API keys for 1.4% of OpenCode Console users. Affected users had linked providers such as Anthropic, OpenAI and Google. Users reported unauthorized charges ranging from several hundred USD to more th…

bleepingcomputer.com · high

Candiru spyware delivered to Al Jazeera devices via malicious targeted ads in zero-click 'AdFection' attacks

Citizen Lab reports that Candiru spyware was delivered to devices at Al Jazeera Media Network through targeted online advertisements, in a zero-click attack that only required the malicious ad to render on the victim's device. Citizen Lab calls the technique AdFection and says its report is the first public technical confirmation of merce…

bleepingcomputer.com · critical

Zeabur breached twice in two months via leaked plaintext credentials; 321,810 accounts exposed, platform shutting down

Zeabur, a developer hosting and deployment platform, disclosed that on October 14-15, 2026 an attacker used leaked internal credentials stored in plaintext to compromise its shared clusters, some Dedicated Servers and internal systems, and ultimately read the production database. The breach affected shared clusters in nine regions, 321,81…