LiteLLM Master Key Leak Enables GitHub Token Theft and Release Pipeline Hijack
A leaked LiteLLM master key exposed a GitHub OAuth token, enabling attackers to steal organization tokens and publish malicious releases.
cloud security
12 stories
OVHcloud GitHub Compromise Reveals GlassWorm Activity
OVHcloud’s GitHub account was accessed by actors linked to the GlassWorm threat group, resulting in credential theft and malicious code injection into private.
GhostAction GitHub Actions Credential-Stealing Workflows Planted in 34,000+ Repositories
GhostAction injected malicious GitHub Actions workflows into over 34,000 repositories, exfiltrating secrets via plain HTTP to a hard-coded IP.
AgentCorruption Vulnerability Puts AWS Environments At Risk With Single Prompt
Analyze the AgentCorruption vulnerability in AWS Bedrock AgentCore, detailing the single-prompt attack path, permissions obtained, and cloud audit logs.
Google Deploys PageBreak AI Agent to Find 500 Web Application Flaws
Google reveals its PageBreak internal AI agent discovered over 500 cross-site scripting vulnerabilities across corporate web applications using deterministic.
Unpatched LMCache Vulnerability Exposes AI Servers to Remote Code Execution
An unpatched LMCache vulnerability leaves AI inference servers vulnerable to unauthenticated remote code execution via insecure Python deserialization.
Building a SASE Framework for Modern Cybersecurity: A Comprehensive Guide to SASE Framework Deployment
A detailed guide on SASE framework deployment, showing how organizations can build a Secure Access Service Edge framework to protect edge computing and remote.
Linux Kernel Vulnerability Gives ARM64 KVM Guests Read-Write Access to Host Memory
A new Linux kernel vulnerability gives ARM64 KVM guests read-write access to host memory, allowing them to escape and run code on the host machine.
AI Agents Driving Unchecked Cloud Compute Costs for Enterprises
Enterprise AI agents are generating uncontrolled compute spend, prompting urgent cost-control measures and new governance frameworks.
Zero-Trust Cloud Security & Kubernetes Audit Checklist 2026: Hardening Guide
Comprehensive engineering checklist for auditing cloud-native Kubernetes clusters. Hardening runtime eBPF telemetry, Falco rules, RBAC least privilege, and network policies.
City Hall Cyber Defense: Recruiting Experts to Harden Municipal Networks
City Hall launches a cyber defense effort, seeking external experts to patch legacy systems, harden cloud workloads, and meet emerging compliance mandates.
OWASP AI skill risks Blueprint Highlights 7 Critical Threats for Cloud Teams
OWASP AI skill risks blueprint flags seven concrete skill‑related risks that threaten cloud workloads, with actionable mitigation steps for DevOps teams.