Skip to content
Threat Feed
Subscribe

Product

GitLab

4 briefs RSS
medium advisory

AWS Bedrock Model Prompt or Completion Containing Credentials

A detection rule identifies AWS access key IDs, Amazon Bedrock API keys, PEM private-key blocks, and GitHub/GitLab tokens within Amazon Bedrock model prompts or completions, indicating a critical credential exposure event through misconfiguration, data leakage, or prompt injection that necessitates immediate secret rotation and investigation.

Amazon Bedrock +2 llm aws bedrock credential-access data-leakage prompt-injection
1r 1t
high advisory

Shai-Hulud Campaign Activity

Tracking brief for the Shai-Hulud campaign; individual sightings are folded in as reported.

jscrambler 8.14.0 +101 campaign shai-hulud
20i updated
high advisory

GitLab: Multiple Vulnerabilities

Multiple vulnerabilities in GitLab allow a remote, authenticated attacker to execute arbitrary code, perform Cross-Site Scripting (XSS), manipulate data, or disclose sensitive information.

GitLab vulnerability web-application rce xss data-exfiltration
3t
high advisory

Compromised node-ipc npm Package Steals Credentials

Hackers injected credential-stealing malware into newly published versions of the node-ipc npm package in a supply chain attack, collecting cloud credentials, SSH keys, CI/CD secrets, and other sensitive data, exfiltrating it through DNS TXT queries.

node-ipc +10 supply-chain-attack npm infostealer credential-theft
2r 3t 2i