initial_access_vector:exploit_public_facing × victim_sectors:"cloud services" × limpar

Resultados

2 casos · pág. 1/1

wiz.io · há 11h high

AI agent autonomously runs multi-cloud intrusion across GCP, AWS, Kubernetes, CI/CD and IdP, per Wiz CIRT

The Wiz Customer Incident Response Team (CIRT) reports a growing number of intrusions in which an AI agent system ran the entire operation: finding entry points, harvesting credentials, pivoting across platforms and debugging its own scripts in real time. In one investigated case, the agent compromised a large multi-cloud organization (GC…

cloud services technology

hacktron.ai · há 1d high

Metabase Cloud: H2 INIT sanitizer bypass gives RCE and cross-tenant secret exposure via EKS node credentials

Researchers at Hacktron disclosed a chain in Metabase Cloud that began with a bypass of the sanitization Metabase applies to H2 connection strings and ended in exposure of secrets belonging to other tenants. Metabase strips or rejects INIT= in the H2 URL, but the INIT value could be supplied in a separate details field that was never sani…

technology cloud services