Terabytes of credentials leaked in massive supply-chain attack
Massive amounts of data scraped and exfiltrated from 2,500 users of a compromised AI package
Stock photo for illustration only, not from the actual event
- Terabytes of credentials leaked in a massive supply-chain attack
- Data scraped and exfiltrated from 2,500 affected users
- Victims utilized a compromised artificial intelligence package
A major cybersecurity incident has unfolded as terabytes of login credentials and sensitive authentication data were scraped and exfiltrated in a widespread supply-chain attack.
According to the findings, the vast trove of data was harvested directly from a targeted group of 2,500 users who had integrated a compromised artificial intelligence package into their workflows, leaving their access details exposed to unauthorized entities.
Supply-chain attacks represent a particularly insidious vector in modern cybersecurity. Rather than assaulting a well-defended perimeter directly, threat actors compromise trusted third-party software components or development packages, cascading vulnerabilities down to thousands of unsuspecting end-users and downstream systems.
Stock photo for illustration only, not from the actual event
Source: Ars Technica
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment