Canadian man pleads guilty to Snowflake hacks that led to 165 breaches
Connor Riley Moucka faces between 2 and 30 years in prison for the hacks.
← Thèmes
💻
Développement
Langages, frameworks, outils et pratiques de développement logiciel.
550 articles
S’abonner (RSS)Des agents Anthropic et OpenAI créent de fausses identités pour piéger un développeur
L'AI Security Institute britannique a révélé mardi qu'un agent IA développé par Anthropic avait tenté de manipuler un administrateur humain pour lui faire approuver du code malveillant, dans le cadre d'une série d'incidents impliquant des modèles d'AI.
"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages
Analysis of ChainDrop, an npm supply chain worm extracting GitHub Actions runner secrets and using Ethereum smart contracts for C2 routing.
Anthropic AI agent faked identities, phished real developers in UK government hacking test
Anthropic and OpenAI models’ unprompted actions forced halt to UK cyber tests.
77 Open VSX extensions found harvesting developer info
Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.
Announcing Cloudflare Wallets: the programmable wallet for the agentic Internet
Cloudflare Wallets lets AI agents securely pay for APIs and content using spending limits, wallet handles, and x402 payments.
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks
A Keyv-linked npm worm poisoned 353 versions across 79 package names, stealing developer and CI credentials while repository hooks remained present.
Apple challenges UK government’s latest demand for iCloud backdoor: report
Seeking to protect users' iCloud accounts, Apple is reportedly mounting a new challenge to British legal demands for ways around the company's Advanced Data Protection feature.
Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT
Amgen says cloud data breach exposed patient health, proprietary info
The biotech giant Amgen informed regulators that patient information and proprietary company data were accessed through a breach of third-party cloud systems.
7 days without a claude code update, are they re-writing it in rust or something?
wisp – a single static-binary honeypot with cloud/container/LLM decoys (a modern take on OpenCanary)
Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Nono: Open-source sandbox for AI agents AI coding agents
What I find so impressive though is that this malware has been active on GitHub FOR A YEAR. Dawg...
> get dm > "smelly, is this goop?" (malware) > "i found it on x" > links GitHub > download > look...
ProcessAlpha", "ProcessBeta", etc Not only is this shit slop malware, the author of this malware is larping to themselves as like, some sort of military operation. My brother in Christ, I'm happy you're feeling peppy about your slop malware, but you ARE NOT writing state-sponsored malware.
What is a relay on the Cloudflare MoQ Network?
Cloudflare Calls is a serverless SFU and TURN service running at Cloudflare’s edge. It’s now in open beta and costs $0.05/ real-time GB. It’s 100% anycast WebRTC
31 juil.
Now hear this: Podcasts from Google Cloud
How do you make sure your favorite cereal is always on the shelves when a cyber disaster strikes? In this episode, hosts Tim Peacock and Alicja Cade sit down...
31 juil.
♻️ Updates and Releases
1.0.0-beta5
31 juil.
Azure maintient la dynamique la plus forte
Microsoft conserve la croissance cloud la plus élevée parmi les grands hyperscalers. Azure affiche une progression de 43 % sur un an tandis que l’ensemble de l’activité Microsoft Cloud atteint 59,3 milliards $ de chiffre d’affaires trimestriel, en hausse de 27 %. Le groupe attribue cette performance à la diffusion croissante de ses offres d’IA, notamment Azure AI et Microsoft 365 Copilot. Microsoft indique désormais compter plus de 30 millions d’utilisateurs payants de Microsoft 365 Copilot. Aut
31 juil.
Google Cloud poursuit son accélération
Google Cloud confirme également une nette accélération de sa croissance. Pour son deuxième trimestre fiscal, la division a généré 24,8 milliards $ de chiffre d’affaires, en hausse de 82 % sur un an. Son résultat opérationnel atteint 8,8 milliards $, contre 2,8 milliards un an plus tôt, tandis que son carnet de commandes progresse à 514 milliards $. Le groupe met notamment en avant l’adoption de Gemini Enterprise, désormais utilisé par près de 90 % des entreprises du Fortune 100, ainsi que la pro
31 juil.
> be me > get message from TorGuard owner > "i found goop" (malware) > wtf let me see goop (malwa...
t-5min-bot" > by "crazygirl437" on GitHub > code walks directory and uploads files to website > "checkenv(.)cloud" > lol its for a rust crate that sets a table width > image 1 > neat > hmmmm > beep boop search > find X posts > malware campaign on X > verified accounts sending link to people > "crazygirl437/hyper-grid" > image 2 > more verified accounts posting stuff > lots of impressions and likes > image 3 Chat, we've got a full-blown Threat Actor malware campaign right here on Xitter and it is active as we speak (image 4). Although, it is primarily social engineering work. It is spam, pushed by verified X accounts, that delivers an open-source-malware information stealer. tl;dr free goop for everyone
Free malicious Rust Crate!! https://crates.io/crates/width-table/0.1.0
Block API Hashes Are Randomized
This PR adds the necessary infrastructure to load and process polymorphic assembly stubs from external data files and uses it to dynamically reorder the instructions for the Block API stub that pow...
31 juil.
Kubernetes and cloud credential use
Contribute to elastic/detection-rules development by creating an account on GitHub.
30 juil.