OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach
2026-07-29T07:23:58Z•915b933f2039b1f6462ec137ff54fa55d9664f94dc9ba854c31f35d48463d552
CVE-2026-16723CVE-2026-16812CVE-2026-27577CVE-2026-53264CVE-2026-53921CVE-2026-63077AI-securityBMCC2IPMIIoTLinuxMiraiRATWindowsactive-exploitationbotnetcloud-securitycommand-injectioncredential-exposuremalvertisingmalwarenpmpersistencephishingremote-code-executionsupply-chain-securitythreat-actorvulnerability
What happened
Security news feed covering critical vulnerabilities, active exploitation, malware and botnet campaigns, supply-chain compromises, phishing, exposed management interfaces, and emerging AI-security developments. Highest-risk items include actively exploited VeloCloud Orchestrator command injection, unauthenticated TeamCity and OpenWrt remote code execution, targeted Fastjson exploitation, compromised npm packages delivering a RAT, and exposed BMC/IPMI authentication hashes.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 915b933f2039b1f6462ec137ff54fa55d9664f94dc9ba854c31f35d48463d552
- Enrichment time
- 2026-07-29T07:23:58Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.