The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۹:۰۴

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets

Cybersecurity researchers have disclosed details of a campaign in which an emerging agentic penetration testing platform called AntiFox has been used to steal Amazon Web Services (AWS) credentials and pivot laterally into compromised environments. "In several recently observed intrusions, Alibaba Cloud systems hosting AntiFox interfaces were associated with confirmed malicious actions against

Cloud Computing Penetration Testing

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

BleepingComputer چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۸:۴۲

Hackers use AntiFox AI agents in AWS credential-theft attacks

Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments. [...]

AI Security AI & Machine Learning Cloud Computing

Source

CERT-Bund چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۷:۵۳

[NEU] [hoch] Microsoft Azure: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Azure Produkten ausnutzen, um seine Privilegien zu erhöhen, um Code auszuführen, um Informationen offenzulegen und um Sicherheitsmechanismen zu umgehen.

Cloud Computing

Source

CERT-Bund چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۷:۵۳

[NEU] [hoch] Microsoft Developer Tools: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft Azure, Microsoft Azure DevOps Server, Microsoft PowerShell, Microsoft ASP.NET, Microsoft .NET, Microsoft 365 Apps, Microsoft Visual Studio 2022, Microsoft Visual Studio 2026 und Microsoft Visual Studio Code ausnutzen, um seine Privilegien zu erhöhen, um Code auszuführen, um Informationen offenzulegen, um Sicherheitsmechanismen zu umgeh…

Botnet & DDoS Cloud Computing DevOps & Infrastructure

Source

The Hacker News چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۷:۳۱

Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits

Threat actors have been observed targeting Qlik Sense servers to unsuccessfully deliver PowerShell reverse shell commands against multiple environments in October 2026. Cynet's CyOps and Research teams said they identified the suspicious activity in October 2026 against several E.U.-based customers within a narrow window of just over three minutes. The activity has been found to share some

Source