Browsing Tag
Cloud Credentials
2 posts
Cloud API keys, access tokens, environment secrets, credential exposure, and cloud account compromise risk.
Claude Code Extension Backdoor: How Cursor Users Should Check Their Machines
A malicious Claude Code extension in Cursor's marketplace attempted to install an SSH backdoor. Check the affected versions, exposure window and cleanup steps.
Langflow Attacks Turn AI Workflow Servers Into Credential Targets
Attackers are actively exploiting Langflow flaws to pull OpenAI keys, AWS secrets, environment variables, and Langflow superuser credentials from exposed AI workflow servers. Teams running Langflow should treat patching as only the first step: credential rotation, log review, and network isolation matter just as much.