Share story
Security Infrastructure

Attackers replaced five OVHcloud CLI releases with secret-stealing builds

Attackers replaced five OVHcloud CLI releases with secret-stealing builds Image: Primary
An attacker used a hijacked contributor account to replace download archives on five OVHcloud command-line tool releases on October 19, the cloud provider says. The malicious files were available from 12:47 to 14:21 UTC and targeted secrets stored on machines running them. Exposure covered affected macOS, Linux and Windows downloads through installation paths without pinned hash checks. Homebrew's pinned hashes blocked the substituted files; source builds and Docker images were unaffected. OVHcloud removed the archives and released a clean, immutable v0.16.0. Affected users were advised to rotate every readable secret from another machine: installing a clean version cannot revoke credentials already copied. No swapped archive has been publicly analyzed.
Sources
The Hacker News
In this story
Microsoft Apple
Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Capital AI
Capital AI

Nevis raises $70M with Schwab joining wealth software investors

Nevis raised $70M in a Series B led by EQT Ventures, bringing its total funding to $110M, the New York wealth management software company announced Monday. Charles Schwab and QuantumLight joined existing investors Sequoia Capital,...

The Next Web
Robotics Capital
Robotics Capital

Bedrock Robotics raises $600M at a $4.1B valuation

Bedrock Robotics raised a $600M Series C at a $4.1B valuation, Bloomberg reported. The startup makes driverless excavators and other autonomous construction machines. The financing adds capital to a company developing autonomous ...

Techmeme
Capital
Capital

Matiks raises $10 million to expand puzzle games and game creation

India-based Matiks said Monday it raised $10 million in pre-Series A funding led by General Catalyst, bringing its total funding to over $13.5 million. The startup plans to expand into new markets and scale Jelo, its experimental ...

TechCrunch
AI Products
AI Products

AWS makes GPT-6.1 Terra generally available on Bedrock

AWS announced general availability of OpenAI's GPT-6.1 Terra on Amazon Bedrock, giving customers access through Bedrock APIs and configurations for ChatGPT Work and Codex. The model accepts text and images and supports up to 1 mil...

Recent Announcements
AI
AI

OpenAI releases GPT-6.1 Terra at $1 per million input tokens

OpenAI has released GPT-6.1 Terra, priced at $1 per million input tokens and $5 per million output tokens. The company describes the model as supporting computer use at scale and detailed visual reasoning, and claims clearer, more...

Techmeme