AWS

Researchers from AWS, NVIDIA, LBNL, and NASA have developed a framework to guide infrastructure decisions for quantum-classical integration. The model helps determine when quantum hardware requires physical co-location with supercomputers versus when remote cloud connectivity is sufficient.

An attacker compromised AsyncAPI repositories to publish malicious npm packages that deploy the Miasma RAT credential stealer. The attack impacts millions of weekly downloads and utilizes advanced obfuscation and multi-channel C2 infrastructure.

Threat actors have successfully compromised dozens of Microsoft-owned repositories to deploy the Miasma malware via supply-chain attacks. The malware is designed to steal cloud credentials and spread laterally through developer environments by exploiting AI coding agents.

More than 30 Red Hat npm packages were compromised in a supply-chain attack using the Miasma malware to steal developer credentials. The attack was executed via a compromised GitHub account and targeted various cloud and infrastructure secrets.

This report details the rising trend of opportunistic scanning targeting AI-related services and infrastructure. It highlights specific threats to unauthenticated Ollama instances and the use of coordinated sweeps to harvest AI API keys from configuration files.

Iran's demands for fees on undersea cables in the Strait of Hormuz have severely disrupted global internet connectivity and halted major repair efforts. As a result, tech companies and Gulf nations are urgently pivoting to developing overland fiber routes to ensure continued data flow between the Gulf and Europe.

Pathfinding Labs is a new resource offering over 100 intentionally vulnerable AWS environments for security professionals. It enables red and blue teams to practice exploiting complex, real-world misconfigurations and validate the effectiveness of their detection and CSPM tools.

Iran's demands for fees on undersea cables in the Strait of Hormuz have severely disrupted global internet connectivity and halted major repair efforts. As a result, tech companies and Gulf nations are urgently pivoting to developing overland fiber routes to ensure continued data flow between the Gulf and Europe.

The US Cybersecurity and Infrastructure Security Agency (CISA) was found to have left a massive GitHub repository containing plain-text credentials and infrastructure secrets public for six months. The leak, discovered by a GitGuardian researcher, exposed access to critical systems like AWS, Azure, and Kubernetes, highlighting severe internal security lapses.

An attacker successfully compromised 42 TanStack npm packages by chaining GitHub Actions cache poisoning with OIDC token extraction. The breach allowed for the unauthorized publication of malicious versions that could exfiltrate sensitive cloud and infrastructure credentials.