A threat actor used compromised Qubole IAM credentials to reach into tens of customers' AWS environments, stealing secrets and downloading S3 data between Oct 14 and 26, according to research by Wiz and Sentra. The campaign…
ESET researchers found that Turla's Cereal toolkit turned two national governments' own Microsoft Exchange servers into covert command posts, leaving no external control server for defenders to block. The compromises were found…
A local user on shared Linux or macOS hardware can read sensitive Aspire CLI configuration because the tool writes diagnostics to a fixed temporary-file path, Microsoft's advisory says. Microsoft attributes the flaw to the CLI's…
A data-wiping intruder has left Russian cloud provider Beget rebuilding from scratch, with data loss irreversible for roughly half of VPS customers after the Nov. 1 breach of its cloud management systems, BleepingComputer reports.
A file-read tool in an AI code assistant can be tricked into reading any file on the server, not just files inside the project folder. GitHub's advisory database reports that the flaw requires no authentication when the HTTP…
A single forged X-Forwarded-For header lets any remote caller defeat ezBookkeeping’s configured IP allowlist and have actions logged under a trusted address instead of the attacker’s own IP, according to the GitHub advisory.
Telepresence's Traffic Manager gRPC API on port 8081 requires no authentication, so any pod with cluster-network access can register in a managed namespace, intercept services in other namespaces, and receive the victim pod's…
A remote Telegram user who can message praktor by default can write files outside the uploads directory into the agent's persistent workspace, privately reported by tonghuaroot, because the empty allow list permits every sender.
An attacker who does not know a password can alter a PKCS#12 file and still make node-forge accept it as valid under that password, GitHub’s advisory says. The file’s integrity check collapses to a constant key.
Attackers can force @enspirit/elo to emit executable JavaScript, Ruby, Python or SQL code by supplying malicious values to its programmatic AST API, researchers report, because the library interpolates unvalidated fields straight…
The MCP filesystem tool list_directory_with_sizes follows symlinks when listing children, so an inside symlink to an outside file leaks that file's size. Researchers @cybercraftsolutionsllc reproduced it on…
A malicious prompt can make the banks LLM template library run arbitrary code through its tool-handling path, GitHub's advisory warns. The flaw survives the 2.4.2 Jinja sandbox patch because it resolves import_path in Python…