Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
A now-patched vulnerability in Azure Cosmos DB could have allowed an attacker to escape the service's Gremlin query sandbox and gain full…
Tag: credential security
24,650 Internet-Exposed BMCs Leak IPMI Password Hashes Before Login
Cybersecurity researchers have discovered over 36,000 Baseboard Management Controller (BMC) interfaces exposing the Intelligent Platform Management Interface (IPMI) protocol to the public…
Russian Intelligence Hijacks IP Cameras Across NATO and Ukraine for Military Espionage
At least one Russian intelligence service is systematically hijacking internet-connected security cameras across Europe and Ukraine to spy on military logistics, according…
Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads
Security researcher cereblab discovered that xAI's Grok Build coding CLI (version 0.2.93) was uploading entire Git repositories—including full commit history—to a Google…
AI Coding Agents Trigger Endpoint Security Rules Designed for Human Attackers
Sophos has identified that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are triggering endpoint security rules originally designed…
The Onboarding Password Mistake That Creates Unnecessary Risk
Employee onboarding often involves sharing temporary passwords via email or SMS, creating security risks if intercepted or never changed. Attackers exploit weak…
Specops uReset: Password Reset and Self-Service Solution
Specops uReset is a password reset solution that includes Specops First Day Password, enabling secure self-service password management for enterprises. It helps…