/
ttps_attack:T1078.004 × victim_sectors:"software development" × limpar

Resultados

2 casos · pág. 1/1

techcrunch.com · high

OpenCode Console breach exposes AI provider API keys of 1.4% of users, driving unauthorized charges

OpenCode, an open-source AI coding agent, disclosed on Saturday that attackers broke into an older system overnight and affected 1.4% of users of its online platform, OpenCode Console. Some of those users store API keys for AI services there. The company called it a "large-scale distillation attack", but skeptics say it was a straightforw…

technology software development
unit42.paloaltonetworks.com · high

DPRK-linked supply chain campaigns (ChainDrop, PolinRider) use Web3 blockchain C2 to steal cloud credentials from developer and CI/CD environments

Unit 42 reports that threat actors are moving supply chain malware C2 from hardcoded endpoints to Web3 mechanisms, so an entire botnet or worm infrastructure can be re-pointed with a single blockchain transaction. The ChainDrop npm worm (Shai-Hulud family, 400+ npm packages) and the PolinRider campaign (npm, Go modules, Packagist) target …

Alluring Pisces Sapphire Sleet technology software development