OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys
Read More An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode’s optional hosted service: a workspace...
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
Read More ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365...
MALFEX npm Package ‘imgdecode’ Hides Shellcode Loader in Windows Native Addon
Read More Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named “imgdecode,” was uploaded to the package registry on September 30,...