10 casos · pág. 1/1
The Wiz Customer Incident Response Team (CIRT) reports a growing number of intrusions in which an AI agent system ran the entire operation: finding entry points, harvesting credentials, pivoting across platforms and debugging its own scripts in real time. In one investigated case, the agent compromised a large multi-cloud organization (GC…
Zeabur, a developer hosting and deployment platform, disclosed that on October 14-15, 2026 an attacker used leaked internal credentials stored in plaintext to compromise its shared clusters, some Dedicated Servers and internal systems, and ultimately read the production database. The breach affected shared clusters in nine regions, 321,81…
Ingram Micro's AWS Greenfield Practice Lead, Lee Robson, previews the company's participation at DTX + UCX London 2026. The company plans to demonstrate AI, cloud and security solutions built on AWS, including AWS Quick, Claude via Amazon Bedrock, FinOps-led cloud optimisation and AWS security assessments. Robson says channel buyers strug…
An actor using the handle 0xRune claims to have uploaded roughly 20 GB of data belonging to Cast AI, described as a multi-cloud, multi-region infrastructure backup and development environment. The listing references AWS Lambda deployment packages, S3 backups, infrastructure-state data, billing exports and a GitLab backup dated October 5, …
In late August 2026, Sekoia's TDR team observed an attacker compromise an unauthenticated Flowise honeypot (emulating v2.2.8). The attacker harvested stored credentials, tried to plant a malicious chatflow with a callback to 154.217.251.226, and used prompt injection to turn the LLM agent into an offensive analysis assistant. The activity…
A leaked Anthropic S-1 filing, reported by The Wall Street Journal and summarized by TechCrunch, says the company is struggling to secure enough cloud capacity from AWS, Google and Microsoft, which increasingly see it as a competitor. Anthropic expects to spend more than $750 billion on cloud contracts, some still under negotiation. It is…
GhostAction has returned with an expanded credential-theft operation. By October 9, 2026, attackers had injected malicious GitHub Actions workflows into 790 repositories, according to OpenSourceMalware's validated total. The campaign was first documented by GitGuardian in 2025 (817 repositories, 3,325 stolen secrets). It relies on comprom…
Dashlane's third annual Passkey Power 20 report found that passkey use is growing but still trails passwords. The report covers millions of aggregated, anonymized authentications between July 2025 and June 2026. Authentications by Dashlane users nearly doubled year on year to 2.5 million per month, and 57% of users now store at least one …
Nvidia has released new open-weight AI models for always-on agents and edge computing. The Nemotron 3.5 Super VL is a 120-billion-parameter model for enterprise agents. Nvidia says it matches the accuracy of the larger Nemotron 3 Ultra on instruction-following and tool-use tasks. Two lightweight Bolt models, Nemotron 3.5 Bolt 74B-A9B and …
A critical Linux kernel networking flaw, CVE-2026-99999 (nicknamed PwnEscape, CVSS 9.3), lets code inside a guest VM read host memory, crash the host and, in lab conditions, run code on it. Researcher Paulos Yibelo of pwn.ai demonstrated the memory leak against Vercel's production sandboxes, which Vercel confirmed. The flaw was found in a…
