Hackers Target Exposed Vite Servers to Steal AWS and Azure Secrets
A mass-scanning campaign targets internet-exposed Vite development servers to steal cloud credentials linked to AWS and Azure environments.
Tag
#Cloud Security
17 results in the archive.
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts
Microsoft disclosed campaigns where attackers exploited third-party email systems for large-scale financial scam phishing and used passkey-themed social engineering techniques to compromise cloud accounts.
IDScan Confirms Breach Affecting 153 Million Driver’s License Records
IDScan confirmed that hackers accessed customer data on its cloud platform, exposing over 153 million driver’s license scans with sensitive personal identity information.
Passkey-themed Social Engineering Enables Identity and Cloud Compromise
Attackers exploit passkey-themed social engineering to bypass MFA and leverage Microsoft Graph for access to SharePoint, OneDrive, and email data, impacting cloud and identity security.
Cloud Security Risks Vary Significantly Across Providers, New Data Shows
A 2026 Cloud Security Index revealed unique risk profiles in AWS, Azure, and Google Cloud through misconfiguration data from 3,000 organizations, challenging traditional multi-cloud security strategies.
Attackers Breach JetBrains Cadence via Unpatched TeamCity
JetBrains suffered a breach after attackers exploited an unpatched TeamCity vulnerability to access Cadence and extract AWS credentials.
Coder’s registry compromised to distribute malicious Terraform modules
Attackers breached Coder's Cloudflare infrastructure to push malicious Terraform modules that embed credential-stealing code, threatening developer credentials.
Critical Langflow Flaw Exploited to Steal OpenAI and AWS Keys
An unauthenticated remote code execution vulnerability in Langflow is exploited to steal sensitive OpenAI and AWS credentials, posing substantial risks to cloud and AI security.
CISA Red Team Tests Expose Critical SOC and Cloud Security Gaps
CISA's red team assessments identified significant detection and response weaknesses in IT, cloud, and OT environments, revealing misconfigured Active Directory and excessive cloud permissions.
Thousands of Active Leaked AWS Keys Expose Corporate Accounts
Over 9,300 AWS access keys leaked between 2022 and 2026 remain active, exposing corporate accounts to unauthorized access risks.
Hacker Claims 3.6M Azure Account Records Stolen from Major Companies
A threat actor is selling employee databases stolen from Microsoft Azure infrastructure of multiple Fortune 500 companies using compromised credentials, exposing sensitive account records and presenting an enterprise security risk.
Malicious LiteLLM Releases Linked to Trivy Hack Expose 2,100+ Orgs
Two malicious LiteLLM packages on PyPI in March contained credential-stealing code that potentially exposed over 2,100 organizations by capturing cloud and system secrets.
Canadian Pleads Guilty to Snowflake Cloud Data Theft
A Canadian individual admitted guilt in a data theft scheme targeting Snowflake cloud accounts, compromising sensitive data from at least 165 organizations and pursuing extortion.
Amgen Cloud Data Breach Exposes Patient and Corporate Information
Amgen reported a cloud data breach involving unauthorized access to patient health data and proprietary corporate information via third-party cloud systems.
Azure Cosmos DB Flaw Exposed Platform-Wide Access Key
A critical vulnerability in Azure Cosmos DB enabled attackers to escape the Gremlin query sandbox and gain full read/write access to multiple customer databases.
Critical Bing Image Flaw Allows SVGs to Execute Commands as SYSTEM
A crafted SVG submitted to Bing image search can execute commands as NT AUTHORITY\SYSTEM on Microsoft’s production servers, impacting multiple hosts with critical security implications.
NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
The NadMesh Go botnet targets exposed AI services to harvest over 3,800 unique AWS keys, threatening cloud and Kubernetes environments.