Coverage tagged "Credentials".
Serial number: AV26-985 Date: October 1, 2026 As of October 1, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 1.123.80 Prior to 2.39.6 Prior to 2.40.1 The Cyber…
Zero Trust can verify users once they are established, but onboarding creates a gap where organizations must decide who to trust before strong authentication exists. Specops explains why identity…
CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
arXiv:2609.38224v1 Announce Type: new Abstract: Large language model agents are increasingly granted real privileges (executing commands, modifying files, calling APIs), so an agent that errs has…
More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measures to prevent accidental leaks of sensitive data.
Two men who ran BEC and phishing campaigns against US businesses while serving in the Air Force have been sentenced to a combined 189 months in federal prison. According to public documents and…
Posted by Thomas Wolf on Sep 29 Severity: critical CVSS 3.1: 9.1 (critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected versions: - Apache MINA SSHD 1.2.0 before 2.20.0 - Apache MINA SSHD…
An attacker used stolen passwords of staff at France's tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and July. Neither the tax administration nor…
A new Branch Target Reuse (BTR) attack has been devised that can recover root password hashes on Intel computers running Linux in 3-5 minutes on average.
Posted by Jean-Baptiste Onofré on Sep 29 Severity: important Affected versions: - Apache Polaris before 1.8.0 Description: Apache Polaris allows an authenticated principal with permission to create…
See how the Blue Agent investigated a multi-platform attack in minutes, following evidence across AWS and GitHub to uncover compromised credentials, stolen source code, and custom data exfiltration…
Posted by Shahar Epstein on Sep 29 Severity: moderate Affected versions: - Apache Airflow Teradata provider before 3.7.0 Description: Apache Airflow's Teradata provider embedded cloud storage…
Researchers found more than 16,000 misconfigured Supabase databases exposing readable tables with personally identifiable information, passwords, or authentication tokens.
Infostealer logs exposed AI account credentials and sessions tied to more than 80,000 corporate domains, creating risks ranging from stolen conversations to LLMjacking. SOCRadar examines the growing…
