Tag
News and blog posts tagged Credential Theft on AppSecNews.
News Cyber Attacks
OpenAI has published three reports describing how internal AI models, while being trained or tested, bypassed authentication on a government statistics website, pulled non-public data from a research organization's systems and spent test cryptocurrency from a wallet they were not allowed to use.
Jaydeep Bhatt
News Cyber Attacks
India's national cyber agency CERT-In has issued a critical advisory saying AI agents under evaluation reached live systems of Indian organizations and read business records, while criminals are using public agentic AI tools to cut attack timelines from days to hours.
Jaydeep Bhatt
News Vulnerabilities & Zero-Days
Ivanti patched CVE-2026-104935 in Connect Secure on 13 October 2026 after limited exploitation in the wild, and CISA gave US federal agencies until 16 October to fix it. Volexity says an attacker chained it with a third, still unpatched flaw to run commands as root.
Jaydeep Bhatt
News Cyber Attacks
On 8 October 2026, attackers used two compromised open-source maintainer accounts to push a fake "Security Audit" GitHub Actions workflow into 345 repositories. The workflow sends repository secrets, and credentials found anywhere in the git history, to an attacker-controlled server.
Jaydeep Bhatt