Snowflake Postgres role chain reached OS command execution, now fixed
Varonis chained CREATEROLE, pg_cron, and archive_command in its own test tenant; Snowflake patched before publication.
62
Vendor
Snowflake
- Mentions · 7d0
- Mentions · 30d19
- All mentions33
- First seenAug 17, 2026
- Last mentioned11d ago
Timeline
33 articles · newest firstAT&T to Pay $177 Million After Two Massive Customer Data Breaches
A federal judge approved AT&T’s $177 million settlement over two 2024 customer data breaches.
58
ASOS breach update: Hackers stole customer details and shopping searches
ASOS says attackers stole customer identities and shopping searches after tricking an employee for login credentials.
74
ASOS: Hackers tricked way into employee account before sending rogue push notification
ASOS says attackers impersonated a trusted contact, hijacked an employee account, and accessed some customer contact data.
62
Asos confirms breach of customer data after hackers send rogue app notification
Asos confirmed hackers stole customer contact data from a Snowflake platform and sent a rogue app notification.
76
ASOS Confirms Data Breach Linked to Stolen Employee Credentials
ASOS confirmed attackers used stolen employee credentials to access customer account data via third-party platforms.
60
Hackers Steal Rockstar Source Code, 78.6 Million Records and Playable GTA VI Build
Lares links separate Rockstar intrusions to stolen source code, 78.6 million analytics records, and a leaked GTA VI build.
74
Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading
ASOS says names and contact details may have been accessed after rogue customer notifications; broader hack claims remain unproven.
74
The ASOS incident: When attackers use the channels customers trust
ASOS confirmed an unauthorized app push and possible exposure of customer names and contacts.
64
ASOS Confirms Cyberattack, Data Breach
ASOS confirmed a third-party notification platform was hacked, potentially exposing customer names and contact details.
62
Rockstar Games Attacks Expose MFA Fatigue, OAuth Token Theft and Dev Pipeline Security Failures
Lares ties Rockstar breaches to MFA fatigue and stolen OAuth tokens, including a claimed 78.6-million-record Snowflake leak.
58
ASOS Hacked as Attackers Abuse Customer Notification Platform to Threaten Data Leak
ASOS probes unauthorized customer alerts that threatened a data leak; the Snowflake claim is unverified.
63
ASOS confirms data breach after “HACKED” in-app notifications
ASOS confirmed a breach after hackers pushed HACKED alerts via its app claiming a Snowflake theft.
67
ASOS Hacked – App Users Receive Notifications Sent by Hackers
ASOS is investigating unauthorized customer app alerts after hackers claimed they compromised its Snowflake environment.
68
ASOS “hackers” send push notifications to customers
ASOS customers got in-app alerts claiming hackers fully compromised Snowflake and threatening to leak data.
64
Asos app delivers a data leak threat instead of fast fashion
ASOS customers received a rogue app alert claiming its Snowflake instance was compromised and threatening a data leak.
45
ASOS Customers Receive Bizarre “Hacked” Message Amid Suspected Snowflake Compromise
ASOS customers received alerts claiming hackers compromised Snowflake and will leak data.
68
ASOS app users receive push notifications apparently sent by hackers
ASOS app users got hacker alerts from new Xuanye Group claiming a Snowflake compromise.
70
Shares in British clothing company ASOS dive after hackers apparently send push notification
ASOS shares fell over 10% after an unconfirmed app alert claimed hackers compromised its Snowflake data environment.
60
CVE-2026-81930: Apache Airflow Snowflake provider: Unvalidated account field redirects SQL API bearer token off-domain
Apache Airflow's Snowflake provider can leak SQL API bearer tokens off-domain via an unvalidated account field (CVE-2026-81930).
44
Former US soldier gets nearly six-year sentence for hacking, extorting telecoms
Ex-soldier Cameron Wagenius was sentenced to 70 months for hacking and extorting US telecoms.
66
Ex-US soldier gets 70 months for role in AT&T, Snowflake data thefts
A former U.S. Army soldier received 70 months for stealing AT&T and Snowflake customer data and extorting victims.
63
US soldier gets 70 months in prison for extorting 10 tech, telecom firms
A former US Army soldier received 70 months for hacking and extorting at least 10 tech and telecom firms.
64
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier received 70 months for extorting AT&T and Verizon after stealing call metadata.
68
Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies
A former U.S. Army soldier was sentenced to 70 months for extortion attacks on AT&T and Snowflake customers.
64
Trying the Software Factory Pattern
Imprint's engineering lead details adopting an AI 'software factory' pattern that loops agents on Linear projects using Datadog metrics.
35
Now everyone can put data to work
OpenAI launched a Data agent in ChatGPT Work that connects to enterprise warehouses and builds shareable analysis dashboards without SQL.
62
Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs
Google, Anthropic and OpenAI launch cyber-focused AI models and programs: Gemini 3.8 Flash Cyber, Claude Fable/Mythos 5.1, and Astra's Critical rating.
88
McKesson copes with fallout from data theft extortion attack
McKesson discloses a data theft extortion attack by ShinyHunters affecting oncology and medical-surgical customers, with a reported $55 million demand.
80
ShinyHunters claims it stole 284 million patient records from McKesson
ShinyHunters claims theft of 284 million patient records from McKesson via vishing, Okta takeover, and Salesforce/Snowflake access, demanding $55,236,150.
88
Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed
Wiz's AI agent uncovered a critical flaw in Snowflake's GitHub Actions workflow that GitHub Advanced Security scans had missed.
60
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Wiz disclosed a GitHub Actions workflow injection in Snowflake's snowflake-connector-net repo that exposed Jira API tokens; Snowflake patched the flaw.
45
Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR
Wiz's autonomous Red Agent found and exploited a GitHub Actions injection in a Copilot-assisted PR, reaching Snowflake's internal Jira without human help.
60
Related CVEs
by mentions- CVE-2023-452082%8.8A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers…
- CVE-2023-240592%7.3Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023
- Airflow Snowflake provider leaks bearer tokens via account URL
Appears with
- Snowflakeproduct · 24
- Snowflakeorganization · 15
- Asosvictim · 15
- Asosorganization · 13
- Xuanye groupthreat actor · 8
- AT&Tvictim · 6
- U.S. Armyorganization · 4
- ShinyHuntersthreat actor · 4
- Simon AIproduct · 4
- John Erin Binnsthreat actor · 4
- GitHubvendor · 3
- Simon AIorganization · 3
- Snowflakevictim · 3
- FBIorganization · 3
- Connor Riley Mouckathreat actor · 3
- U.S. Department of Justiceorganization · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.