Xen Orchestra auth bypass exploited for admin and root access
Vates fixed VSA-2026-062, which has no CVE yet, in Xen Orchestra 6.9.1 and 6.10.0 and xo-server 5.211.2 and 5.213.1.
78
Malware
RedLine Stealer
- Mentions · 7d1
- Mentions · 30d1
- All mentions3
- First seenSep 25, 2026
- Last mentioned1d ago
Timeline
3 articles · newest firstHackers Don’t Need to Break Into the Cloud When They Can Steal the Keys
Wiz says Lumma, RedLine, and Vidar stealers are harvesting cloud, code, and AI credentials.
73
The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments
Wiz finds Lumma, RedLine, and Vidar dominate infostealer theft of AWS, GitHub, and OpenAI credentials from endpoints.
64
Appears with
- Vidarmalware · 2
- GitHubvendor · 2
- Lumma Stealermalware · 2
- Wizorganization · 2
- Microsoftvendor · 2
- Googlevendor · 2
- Amazon Web Servicesvendor · 2
- Verizonorganization · 1
- XCP-ngproduct · 1
- JINX-0164threat actor · 1
- Microsoft Azureproduct · 1
- AWS CLIproduct · 1
- Azure CLIproduct · 1
- GitLabvendor · 1
- Vates VMSvendor · 1
- OpenAIvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.