3 casos · pág. 1/1
OpenCode, an open-source AI coding agent, disclosed on Saturday that attackers broke into an older system overnight and affected 1.4% of users of its online platform, OpenCode Console. Some of those users store API keys for AI services there. The company called it a "large-scale distillation attack", but skeptics say it was a straightforw…
GreyNoise reports a proxyjacking campaign by a malicious cyber actor (tracked as skynox7) that exploited network edge devices globally to covertly install Pawns.app proxyware and monetize victims' bandwidth. At least 143 devices in 34 countries were compromised, and the actor also appeared to target other DVR/NVR brands such as Hikvision …
FortiGuard Labs describes an LLMjacking incident in which an AWS account was compromised through a leaked, long-lived IAM access key with AdministratorAccess permissions. The operator subscribed to one or more foundation models through AWS Marketplace and invoked them through Amazon Bedrock, generating inference charges against the victim…
