Browsing Tag
Credential Theft
4 posts
Credential theft, token theft, session-cookie abuse, password stealing, and account-takeover risk.
LiteLLM 1.107.0 Ran Malware on Python Startup: How to Recover
LiteLLM 1.107.0 poisoned official PyPI and container releases. Check the exact exposure window, rebuild safely and rotate every credential at risk.
OpenCode Breach Exposed Provider API Keys: What Console Users Should Rotate
OpenCode says a breach affected 1.4% of Console users with external providers linked. Here is how to scope exposure, rotate AI API keys and audit usage.
Langflow Attacks Turn AI Workflow Servers Into Credential Targets
Attackers are actively exploiting Langflow flaws to pull OpenAI keys, AWS secrets, environment variables, and Langflow superuser credentials from exposed AI workflow servers. Teams running Langflow should treat patching as only the first step: credential rotation, log review, and network isolation matter just as much.
Microsoft’s StealC and Amadey Takedown Hits the Credential-Theft Supply Chain
Microsoft, Europol, and security partners disrupted infrastructure used by StealC and Amadey, two malware-as-a-service tools tied to credential theft, ransomware access, and financial fraud. The operation matters because it targeted the supply chain behind intrusions, not just one malware family.