CRITICALADVISORY16m ago
Hundreds of leaked AWS keys give full control over corporate accounts
Over 9,300 active AWS access keys with admin privileges have been publicly exposed in code repositories and public sources, with Hugging Face identified as a major leak vector. Attackers with these keys can take full control of affected AWS accounts, exfiltrate data, compromise infrastructure, and deploy cryptominers. Any organization using AWS needs to assume their credentials may be compromised.
Action required
Immediately audit all AWS access keys in your environment. Revoke any keys found in public repositories or source code. Rotate all remaining keys and enable CloudTrail logging to detect unauthorized access or API activity. Check CloudTrail for any suspicious activity dating back 90 days.
AWSAmazonTruffle SecurityHugging Face
CRITICALADVISORY16m ago
Popular Rust Crates Compromised in Build-Time Supply Chain Attack
Three legitimate Rust crates (arrayref, internment, append-only-vec) were compromised with a malicious dependency that executes during build time. Any developer or CI/CD pipeline that built these packages between compromise and removal has potentially compromised systems with cross-platform malware capable of persistence and data exfiltration. This impacts the entire supply chain downstream of affected builds.
Action required
Immediately identify all internal builds that consumed arrayref, internment, or append-only-vec in the affected timeframe. Isolate those developer workstations and CI/CD agents, scan for proc-macro1 artifacts and browser data exfiltration indicators, then reimage systems before returning to service.
arrayrefinternmentappend-only-vecproc-macro1proc-macro2
CRITICALADVISORY16m ago
CISA orders feds to patch actively exploited TrueConf Server flaws
Two critical unauthenticated RCE vulnerabilities (CVE-2026-72529, CVE-2026-72530) in TrueConf Server are being actively exploited by Head Mare group to deploy backdoor malware via trojanized installers. Any organization running TrueConf Server is at immediate risk of compromise.
Action required
Identify and patch all TrueConf Server instances to the latest patched version immediately. Scan for trojanized TrueConf client installers on endpoints and hunt for suspicious outbound connections from affected servers.
TrueConf ServerTrueConfZoomMicrosoft Teams
