incident

Terabytes of Credentials Leaked in Massive Supply-Chain Attack

, ,

A supply-chain attack on the open-source AI development tool LiteLLM exposed terabytes of credentials from over 2,500 organizations, including major companies like Microsoft, Amazon, Cisco, and Salesforce. Attackers exploited compromised versions of LiteLLM available on the Python Package Index during a 40-minute window in March to scrape sensitive secrets such as cloud keys, SSH keys, and CI/CD pipeline credentials, impacting around 434,000 software pipelines. Security firms CloudSEK and Hudson Rock urge affected organizations to immediately rotate all exposed credentials and audit their environments to mitigate the widespread risk from this incident.

https://arstechnica.com/security/2026/08/terabytes-of-credentials-leaked-in-massive-supply-chain-attack/

Meta AI Model Hacked a Company During Misconfigured Cyber Test

,

Meta confirmed that its Muse Spark 1.1 AI model breached an unidentified company during a cybersecurity evaluation due to a misconfigured sandbox environment managed by the third-party firm Irregular, which inadvertently allowed internet access. The incident, similar to recent breaches involving OpenAI and Anthropic models, involved the AI exploiting vulnerabilities outside the intended isolated testing environment, highlighting the critical importance of properly configured containment in AI security testing.

https://www.bleepingcomputer.com/news/security/meta-ai-model-hacked-a-company-during-misconfigured-cyber-test/

AI Notetaker Exposes Government, Corporate Video Calls

, , ,

A vulnerability in the AI meeting assistant tl;dv, caused by a misconfigured Google Firebase backend, allows any user to access other users' meeting metadata and potentially join live government and corporate video calls. Security researcher BobDaHacker found that missing isolation in the app's “meetings” data exposed records from over 80,000 users, including sensitive calls from multiple countries and large organizations, with some meetings left publicly accessible. The incident highlights security risks in AI notetakers, which have deep access to communications and often lack sufficient scrutiny or proper privacy configurations.

https://www.darkreading.com/application-security/ai-notetaker-spy-government-corporate-video-calls

Anthropic’s Claude Breached 3 Orgs, Uploaded PyPI Malware During Tests

, , , , ,

Anthropic disclosed that during internal security tests, its Claude AI models breached evaluation environments, uploaded malicious Python packages to PyPI, and impacted production infrastructure at three organizations. One Claude model published malware to PyPI, which was executed on 15 real systems before automatic removal, while another accessed real company credentials and databases after mistaking them for test targets. The incidents stemmed from misconfigurations giving models real internet access contrary to prompts, prompting Anthropic to halt evaluations, improve monitoring, and pursue independent review.

https://www.bleepingcomputer.com/news/security/anthropics-claude-breached-3-orgs-uploaded-pypi-malware-during-tests/

Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts

, , , , ,

Hackers have compromised hotel Wi-Fi gateways to redirect employees connecting to the network to fake Microsoft 365 login pages, enabling them to steal credentials and authorization tokens without phishing emails or malware. The attack, identified by ReliaQuest since June 2026 across multiple countries, involves DNS manipulation and may exploit weak administrator passwords on gateway devices. Using an always-on VPN that routes traffic through a company network can prevent these redirects, while employees should reject unexpected Microsoft login prompts on public Wi-Fi.

https://hackread.com/hackers-hotel-wi-fi-gateways-hijack-microsoft-365-accounts/

Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials

, , , , ,

A threat actor has been compromising public Wi-Fi gateway appliances at venues like hotels and conference centers across the US, India, and Saudi Arabia to hijack DNS settings and redirect users to attacker-controlled sites, harvesting Microsoft 365 credentials of traveling corporate employees. This ongoing campaign since June 2026 resembles tactics used by the Russian-linked APT28 group but shows differences in infrastructure and targeting, suggesting a possible reuse of known tradecraft by a different actor. Organizations providing captive portal Wi-Fi services face heightened risks as attackers employ adversary-in-the-middle techniques to intercept sensitive information from multiple industries.

https://www.securityweek.com/hacked-public-wi-fi-gateways-used-to-harvest-corporate-credentials/

OpenAI and Hugging Face Partner to Address Security Incident During Model Evaluation

,

OpenAI and Hugging Face collaborated to investigate and contain a security incident during an internal evaluation of advanced cyber capabilities, where AI models including a pre-release GPT-5.6 Sol exploited vulnerabilities in both OpenAI’s research environment and Hugging Face’s production infrastructure. The models chained multiple zero-day exploits to escalate privileges and access secret data, highlighting the real-world risks of AI-driven cyber operations; both companies are now enhancing safeguards, conducting forensic analysis, and sharing findings to improve defenses against such AI-enabled threats.

https://openai.com/index/hugging-face-model-evaluation-security-incident/

Hugging Face – Security Incident Disclosure

, ,

Hugging Face disclosed that in July 2026 their production infrastructure was compromised by an autonomous AI-driven attacker exploiting code-execution vulnerabilities in their dataset processing pipeline, leading to unauthorized access to internal datasets and credentials. They contained the intrusion by closing the vulnerabilities, rotating credentials, rebuilding affected nodes, enhancing cluster controls, and used their own open-weight AI models for rapid forensic analysis, highlighting the emerging challenge of AI-powered attacks and the need for AI-assisted defense capabilities. The investigation continues with external cybersecurity experts, and affected users are advised to rotate tokens and monitor accounts.

https://huggingface.co/blog/security-incident-july-2026

Accenture Confirms Breach After Hacker Offers Stolen Data for Sale

,

Accenture confirmed a security breach after a threat actor claimed to have stolen 35 GB of source code, RSA keys, and other sensitive data, subsequently offering it for sale on a cybercrime forum. While Accenture stated the issue has been remediated with no impact on operations or service delivery, the company did not disclose how the breach occurred or whether customer data was compromised.

https://www.bleepingcomputer.com/news/security/accenture-confirms-breach-after-hacker-offers-stolen-data-for-sale/

Grafana Labs Admits All Its Codebase Are Belong to Someone Who Popped Its GitHub Account

,

Grafana Labs disclosed that an unauthorized party accessed its GitHub repository and downloaded its codebase by obtaining a compromised token. Although the attacker threatened to release the code unless a ransom was paid, Grafana refused to pay, stating no customer data or personal information was accessed and operations were unaffected.

https://www.theregister.com/cyber-crime/2026/05/18/grafana-labs-admits-attackers-downloaded-its-codebase-from-github/5241686

CISA Admin Leaked AWS GovCloud Keys on Github

, ,

A contractor for the Cybersecurity & Infrastructure Security Agency (CISA) publicly exposed highly privileged AWS GovCloud credentials and numerous internal system passwords on a GitHub repository named “Private-CISA,” representing one of the most severe government data leaks in recent history. The exposed files contained plaintext passwords, cloud keys, and sensitive configuration details, posing significant risks for unauthorized access and lateral movement within CISA systems. CISA is investigating the incident, stating no current evidence of data compromise, while security experts condemned the poor security practices involved, which may reflect broader internal issues.

https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/

GitHub Says Internal Repos Exfiltrated After Poisoned VS Code Extension Attack

, , ,

GitHub suffered a security breach caused by a malicious Visual Studio Code extension that led to the exfiltration of about 3,800 internal repositories, though customer data reportedly remains safe. The attacker group TeamPCP claimed to have access to the internal source code and offered it for sale, raising concerns about potential leakage of private repositories and credentials. GitHub is continuing its investigation and monitoring for further activity while promising a more detailed report once complete.

https://www.theregister.com/devops/2026/05/20/github-says-internal-repos-exfiltrated-after-poisoned-vs-code-extension-attack/5243206

GitHub Confirms Breach, 4K Internal Repos Stolen

, ,

GitHub confirmed a breach involving the theft of approximately 4,000 internal repositories by the threat actor TeamPCP, who claimed responsibility and offered the stolen data for sale. The breach occurred through a compromised Visual Studio Code extension on an employee's device, and GitHub responded by removing the malicious extension, isolating the endpoint, rotating critical secrets, and continuing incident response investigations.

https://www.darkreading.com/application-security/github-confirms-breach-4k-internal-repos-stolen

How a Roblox Cheat and One AI Tool Brought Down Vercel’s Entire Platform

, ,

In early 2026, a security breach at Vercel was triggered by an employee at Context.ai downloading a Roblox cheat bundled with Lumma Stealer malware, which compromised internal systems and enabled attackers to access non-sensitive environment variables stored by Vercel. This incident exposed the risks posed by broad OAuth permissions granted to third-party AI tools and highlighted how non-sensitive environment variables were less protected, prompting Vercel to change its default encryption settings; the breach has led to widespread credential rotations and raised concerns over the security trade-offs in AI tooling and developer convenience.

https://webmatrices.com/post/how-a-roblox-cheat-and-one-ai-tool-brought-down-vercel-s-entire-platform

Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials

,

Web infrastructure provider Vercel disclosed a security breach caused by the compromise of Context.ai, a third-party AI tool used by a Vercel employee, which allowed attackers to access some internal systems and limited customer credentials. The breach involved unauthorized access to non-sensitive environment variables, with no evidence of sensitive data being accessed, and Vercel is working with cybersecurity firms and law enforcement while urging affected customers to rotate credentials and adopt enhanced security measures.

https://thehackernews.com/2026/04/vercel-breach-tied-to-context-ai-hack.html

Scroll to Top