Tag

credential theft

6 articles

Latest in credential theft

OpenCode Breach Puts Spotlight on AI Distillation Threats

An attack using the technique on the open source coding agent’s Console hub exposed third party API keys from OpenAI, Anthropic, and Google

Oct 19, 20263 min

All credential theft Articles

Showing 1–6 of 6

Oct14

Noma Security Discloses Claude Code Desktop Exploit

Security researchers at Noma Security uncovered SneakPeek, a vulnerability in Anthropic’s Claude Code Desktop that allowed malicious JavaScript embedded in large HTML files to bypa…

3 min

Sep14

Blogs

GitLab’s Critical Patch Closes a Path Traversal Flaw Attackers Are Already Probing

GitLab patches two critical flaws, including a CVSS 10.0 unauthenticated file-read vulnerability, putting self-managed instances under urgent pressure to upgrade.

3 min

Aug04

Blogs

Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads

Researchers at Aikido Security and Endor Labs are tracking a fast-spreading supply-chain attack that is compromising a wide range of npm software packages that combined have more t…

3 min

Mar23

Blogs

Two Malicious npm Packages Aim to Steal Credentials and Other Secrets

Bad actors took over a npm maintainer account and have published two malicious packages designed to steal credentials, API keys, and other secrets from the computers of victims who…

3 min

Oct01

Blogs

Worms in the Supply Chain: Shai-Hulud and the Next DevOps Reckoning

DevOps was supposed to make software delivery faster, safer and more reliable. For the most part, it has. But every so often, something nasty crawls out of the shadows and reminds…

3 min