/
ttps_attack:T1528 × latest_source_host:bleepingcomputer.com × victim_sectors:technology × limpar

Resultados

3 casos · pág. 1/1

bleepingcomputer.com · medium

Sponsored analysis: stolen GitHub tokens, ClickFix lures for Claude Code and help desk vishing enable data theft within minutes

A vendor-sponsored analysis by Exaforce (published on bleepingcomputer.com) says attackers are enumerating or exfiltrating data within about 15 minutes of gaining access. It describes three patterns: stolen developer GitHub OAuth tokens, ClickFix lures that impersonate Claude Code install instructions to deliver a macOS stealer, and help …

Scattered Spider technology software development
bleepingcomputer.com · · 3 fontes · 3 atualizações high

Railway PaaS breach exposes customer environment variables and secrets; deployments paused, wallets drained, all users told to rotate keys

Railway, a Platform-as-a-Service provider, disclosed "anomalous activity" on the systems that store customer environment variables. An unauthorized third party may have accessed encrypted variables and, in some cases, obtained the decrypted contents (thehackernews.com, techcrunch.com, bleepingcomputer.com). Railway detected the activity e…

technology cloud
bleepingcomputer.com · · 7 fontes · 8 atualizações critical

LiteLLM 1.107.0 trojanized on PyPI and Docker via stolen GitHub CLI tokens: infostealer and RCE backdoor through Python startup hooks

The LiteLLM release 1.107.0 (a widely used open source LLM proxy and AI gateway developed by BerriAI, about 23 million weekly downloads per theregister.com and gbhackers.com, or about 92 million monthly PyPI downloads per bleepingcomputer.com) was trojanized on PyPI on 21 October 2026 and carries a credential stealer (privcollect) plus a …

technology software