3 casos · pág. 1/1
Varonis Threat Labs disclosed a privilege-escalation chain in Snowflake Postgres that turned a limited, non-superuser role (snowflakeadmin, holding CREATEROLE) into operating-system command execution as the postgres account. The chain abused built-in PostgreSQL behaviors, even though Snowflake had blocked the usual SQL-to-OS routes. Varon…
On October 6, 2026, ASOS app users received a push notification stating the company had been hacked, sent by attackers who gained access to third-party customer messaging platforms used by ASOS. The note, addressed to ASOS's DPO and IT team, claimed the Snowflake instance was "fully compromised" and threatened a leak unless ASOS engaged. …
U.S. Army soldier Cameron John Wagenius (alias Kiberphant0m), 22, was sentenced in Seattle to 70 months in federal prison and ordered to pay $294,978 in restitution. He had pleaded guilty to hacking multiple telecommunications companies and stealing call and text metadata for more than 100 million AT&T customers in 2024. Working with co-c…
