SecuritycPGuard update channel breached
OpsShield says attackers used stolen credentials to push a backdoor through cPGuard's autoupdate, affecting nearly 3,000 servers.
> Search
6 results for “stolen credentials”
Security
Cyber CrimeAI Agent SDK Hit by Worm's Latest Strike
Shai-Hulud worm compromised Tensorlake's npm SDK version 0.5.144, stolen credentials and cloud keys at risk for developers.
Cyber CrimeASOS breach traced to impersonation tactic
ASOS says an employee's stolen credentials, obtained through social engineering, exposed names and contact details held on third-party platforms.
Cyber CrimeStolen Passwords Expose 1,787 Water Providers
SpyCloud research finds infostealer malware has harvested credentials tied to 1,787 U.S. water and wastewater organizations, some reaching operational networks.
SecurityRevoking Leaked API Keys Needs a Standard
Proposal for ORKS would add self-destruct capability to API keys, giving scanners and agents a way to revoke stolen credentials.
SecurityThe Silent OAuth Exploit Bypassing Cloud Identity Defenses
Threat actors are weaponizing OAuth client ID spoofing to validate stolen credentials while remaining invisible to standard telemetry.