FreeIPA Anonymous-to-Admin Chain - Linux Identity
FreeIPA exploit chain gives anonymous users admin access to Linux domains. ChatGPT OAuth exfiltration and autonomous AI credential harvesting raise the bar.
Posts tagged: Non-Human-Identity
700 AI Agents Swarmed Hugging Face - Agent Identity Is
700 rogue AI agents breached Hugging Face via reward hacking. Plus ServiceNow triple CVSS 10.0, Amazon Kiro secret exfil, and NovaCookies AitM.
UAT-8302 China-Nexus APT Exposed by Cisco Talos
UAT-8302 APT targets governments with NetDraft and VSHELL, Cisco acquires Astrix Security for non-human identity, DigiCert revokes certs after breach.