Vulnerabilities
Update LangChat Now to Block Unauthenticated API Key Theft and Super-Admin Creation
A critical flaw in LangChat allows remote attackers to create super-admin accounts and steal provider API keys without any credentials.
API Keys
Everything Shell Bulletin has reported about API Keys: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Verify AI Key Usage Immediately to Stop Criminals From Using Your Budget for Scans
Criminals are using stolen API keys from major providers to run autonomous scanning tools, forcing the key owners to pay for the attack costs.
Cyber Attacks
Audit GitHub Actions Secrets After GhostAction Campaign Compromises 500 Accounts
Attackers injected malicious workflows into thousands of repositories to steal cloud and AI credentials, targeting small business developers.