Daily Cyber News coverage affecting Energy.
Siemens Software Center users face active exploitation of a weakness that can execute attacker-supplied code with the application’s privileges. An authenticated local attacker can place a crafted library in a directory the application searches. Versions before 4.0.9.8 are affected, and Siemens released a…
Machine-learning workloads could execute attacker-controlled code and expose cloud credentials because of an unsafe SageMaker Python SDK default. The SDK generated a predictable storage bucket name without confirming that the caller’s account owned the bucket. An attacker who created the bucket first…
Cloud, AI, and developer credentials may be compromised on systems that ran LiteLLM 1.107.0. Attackers inserted a credential stealer and remote-access backdoor into the release distributed through Python and Docker registries. The malware targeted browser data, cloud credentials, AI provider keys, SSH…
Developers who installed five compromised OVHcloud command-line releases may have exposed secrets stored on their machines. Versions v0.11.0 through v0.15.0 were altered on GitHub before the malicious downloads were blocked. A compromised contributor account replaced existing release files without…
Organizations may already have unauthorized VPN sessions created through a patched GlobalProtect authentication bypass. Ransomware operators including Qilin and Inc have been linked to exploitation, while public reporting also connects Settra activity. Attackers used the access to bypass multifactor…