GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Conversation

Notices

  1. Embed this notice
    Kevin Beaumont (gossithedog@cyberplace.social)'s status on Friday, 21-Aug-2026 02:33:43 JST Kevin Beaumont Kevin Beaumont

    Alation (AI data warehousing company) has a cybersecurity incident running. https://techcrunch.com/2026/08/20/ai-data-giant-alation-confirms-cyberattack/

    In conversation about 2 hours ago from cyberplace.social permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: techcrunch.com
      AI data giant Alation confirms cyberattack | TechCrunch
      from Zack Whittaker
      The data search and AI giant confirmed unauthorized access to its systems during an incident on Tuesday, and said it was investigating the breach.
    • Embed this notice
      Kevin Beaumont (gossithedog@cyberplace.social)'s status on Friday, 21-Aug-2026 02:36:09 JST Kevin Beaumont Kevin Beaumont
      in reply to

      Two days ago there was an outage of Alation Cloud Service listed on their status page. https://status.alationcloud.com/incidents/0dgdkphyd3cm

      In conversation about 2 hours ago permalink

      Attachments


      1. https://cyberplace.social/system/media_attachments/files/117/129/040/587/396/289/original/ee3cf152ef12f93c.jpeg
      2. Domain not in remote thumbnail source whitelist: dka575ofm4ao0.cloudfront.net
        Degraded availability for a subset of customers
        Alation Cloud Service's Status Page - Degraded availability for a subset of customers.
    • Embed this notice
      Kevin Beaumont (gossithedog@cyberplace.social)'s status on Friday, 21-Aug-2026 02:39:10 JST Kevin Beaumont Kevin Beaumont
      in reply to

      Alation appeared extensively in the public TeamPCP dump, including AWS secrets.

      In conversation about 2 hours ago permalink

      Attachments


      1. https://cyberplace.social/system/media_attachments/files/117/129/050/072/430/267/original/0ae44634334e516a.jpeg
    • Embed this notice
      Kevin Beaumont (gossithedog@cyberplace.social)'s status on Friday, 21-Aug-2026 03:05:08 JST Kevin Beaumont Kevin Beaumont
      in reply to

      TeamPCP lists what appears to be Alation on their portal, saying they’ve stole 73gb of data.

      In conversation about an hour ago permalink

      Attachments


      1. https://cyberplace.social/system/media_attachments/files/117/129/146/331/054/353/original/7768e2d4dd31974e.jpeg
    • Embed this notice
      Kevin Beaumont (gossithedog@cyberplace.social)'s status on Friday, 21-Aug-2026 03:09:04 JST Kevin Beaumont Kevin Beaumont
      in reply to

      Prior thread for the TeamPCP LiteLLM dump, which impacted over 2000 companies including some of the world’s biggest.

      For transparency I’ve reported to a few companies they hadn’t rotated their creds via responsible disclosure - and they’ve all now discovered incidents via their logs. https://cyberplace.social/@GossiTheDog/117082931383028334

      In conversation about an hour ago permalink

      Attachments

      1. Domain not in remote thumbnail source whitelist: cyberplace.social
        Kevin Beaumont (@GossiTheDog@cyberplace.social)
        from Kevin Beaumont
        Attached: 1 image Massive leak of credentials and secrets at thousands of orgs where developers executed LiteLLM, terabytes of creds are circulating online now. Root cause = orgs adopting GenAI solutions without proper security. Threat actor = the kids at TeamPCP. Screenshot = Microsoft https://www.hudsonrock.com/blog/largest-ai-supply-chain-breach-of-2026-litellm-hack-impacts-thousands-of-global-enterprises-claim-your-ethical-disclosure
    • Embed this notice
      Kevin Beaumont (gossithedog@cyberplace.social)'s status on Friday, 21-Aug-2026 03:19:32 JST Kevin Beaumont Kevin Beaumont
      in reply to

      The so what of this is - expect a whole bunch of downstream incidents. Big orgs who haven’t even rotated AWS secret keys. Shit happens and happening.

      In conversation about an hour ago permalink

Feeds

  • Activity Streams
  • RSS 2.0
  • Atom
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.