/
victim_sectors:"cloud services" × victim_sectors:technology × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · high

OVHcloud CLI GitHub repository compromised via developer account to distribute secret-stealing binary

OVHcloud disclosed a supply-chain attack on its command-line interface (CLI) repository on GitHub. An attacker used a compromised developer's GitHub account to insert a malicious binary designed to retrieve secrets from users' disks. CEO Octave Klaba confirmed the incident on 19 October 2026 after a customer report. The compromised releas…

cloud services technology
gbhackers.com · medium

Varonis Threat Labs chains PostgreSQL features to gain OS-level code execution on Snowflake Postgres (fixed server-side)

Varonis Threat Labs disclosed a privilege-escalation chain in Snowflake Postgres that turned a limited, non-superuser role (snowflakeadmin, holding CREATEROLE) into operating-system command execution as the postgres account. The chain abused built-in PostgreSQL behaviors, even though Snowflake had blocked the usual SQL-to-OS routes. Varon…

technology cloud services