#exposed


PoeLLM malware infects exposed AI servers in cryptomining attacks

Oct 7, 2026 // 18:16

A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads. The malware features an uncommon method […]

Over 543,000 valid credentials exposed in public GitHub repositories

Sep 30, 2026 // 21:17

More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform’s security measures to prevent accidental leaks of sensitive […]

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

Sep 30, 2026 // 14:30

AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. […]

Exposed GitLab project email addresses let attackers push code

Sep 24, 2026 // 23:37

Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support […]

New Carbonato malware uses AI agents to hijack exposed Docker hosts

Sep 24, 2026 // 23:37

A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. The malware features […]

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Sep 15, 2026 // 14:20

Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at […]

Japan’s Digital Agency says VPN flaw exposed 246,000 personnel records

Sep 14, 2026 // 23:43

Japan’s Digital Agency has discovered a data breach that may have exposed around 246,000 record rows containing personal information of government employees. The agency says […]

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

Sep 14, 2026 // 19:16

A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments. The operation leverages an […]

Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example “sk-1234” Admin Key

Sep 10, 2026 // 10:59

Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM’s own setup […]

AdaptHealth confirms 4.1 million people exposed in July cyberattack

Sep 10, 2026 // 00:36

Healthcare company AdaptHealth has confirmed that data of 4.1 million people was exposed in a cyberattack discovered in July that was attributed to the ShinyHunters […]

1 2 3 … 9 Next