Weekly cyber roundup: AWS credentials abused for LLMjacking, OAuth survives password resets
TechNadu · x · 2026-09-05
TechNadu's weekly cybersecurity roundup covers seven stories:
- OAuth access tokens surviving password resets, enabling account persistence
- PaperCut attackers moving deeper into networks
- AWS credentials used for LLMjacking, hijacking cloud compute to access LLM services
- Sality botnet disrupted after 20+ years of activity
- First federal juvenile case tied to the 764 network
- Plus C-Track and ATM jackpotting incidents
LLMjacking highlights an emerging attack surface on AI infrastructure.
More from Safety
- India's UPI payment system has been running on an expired cert since Sep 2025 — kingslyj · 2026-10-23
- Claude-assisted audit finds Home Assistant sensors leaking email and street name in User-Agent — adrianscottcom · 2026-10-23
- Cloudflare CTO: token spend over next 18 months will go to security, not engineering — No Priors · 2026-10-23
- UK government spent just £13,000 on AI models that found 500 security vulnerabilities — S_OhEigeartaigh · 2026-10-23
- US Treasury proposes banning all American investment in Chinese AI companies — rohanpaul_ai · 2026-10-23
- rez0 claims he may have submitted nearly a third of all Google BugSwat bugs — rez0__ · 2026-10-23