Cloud | Sec | Labs

Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernetes tokens,

SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. The vulnerability,

https://ift.tt/E0xhbWX researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botnet that comes with significant improvements to improve its

https://ift.tt/Os6VF0d researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the

https://ift.tt/7Z6YNlL malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without

https://ift.tt/RS6unb2 lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting