[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fg_awSbn-N3Vvr5AVFBCT3jCPd1XNPd7pZeckaQniUt8":3},{"article":4,"iocs":55,"watch_terms":76,"solutions":77,"lesson":165},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"9d963586-e558-4966-96b3-9364621ee92e","Hackers target exposed Vite dev servers to steal AWS, Azure secrets","hackers-target-exposed-vite-dev-servers-to-steal-aws-azure-secrets-5aa4d6","A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments. [...]","A mass-scanning campaign is targeting internet-exposed Vite development servers, exploiting CVE-2026-39364 to steal AWS and Azure cloud credentials. The vulnerability allows unauthenticated attackers to bypass file access controls and retrieve sensitive environment and configuration files. Attackers are also leveraging other Vite vulnerabilities and using Google Cloud IP ranges for evasion.","Hackers exploit Vite dev servers via CVE-2026-39364 to steal AWS and Azure cloud secrets.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fhackers-target-exposed-vite-dev-servers-to-steal-aws-azure-secrets\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F05\u002F05\u002Fhacker.jpg","2026-09-14T16:15:58+00:00","2026-09-14T18:00:23.670723+00:00",8,[17,20,23,25,28,30],{"name":18,"type":19},"Vite","product",{"name":21,"type":22},"AWS","technology",{"name":24,"type":22},"Azure",{"name":26,"type":27},"F5","vendor",{"name":29,"type":22},"Google Cloud",{"name":31,"type":22},"Terraform","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,43,45,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[56,60,63,66,68,72,74],{"type":57,"value":58,"context":59},"cve","CVE-2026-39364","Vulnerability allowing bypass of file read\u002Faccess controls in Vite",{"type":57,"value":61,"context":62},"CVE-2025-30208","Additional Vite vulnerability exploited by attackers",{"type":57,"value":64,"context":65},"CVE-2025-31125","Vite vulnerability flagged as actively exploited",{"type":57,"value":67,"context":62},"CVE-2024-45811",{"type":69,"value":70,"context":71},"ip","34.14.15.105","Active IP address originating malicious activity",{"type":69,"value":73,"context":71},"34.16.200.129",{"type":69,"value":75,"context":71},"34.11.196.206",[26,18],{"controls":78,"vendors":159},[79,108,137],{"slug":80,"name":81,"problem":82,"products":83},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"slug":109,"name":110,"problem":111,"products":112},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[113,121,129],{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":138,"name":139,"problem":140,"products":141},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",[142,150,158],{"vendor_slug":143,"vendor_name":144,"vendor_logo":145,"product_slug":146,"product_name":147,"url":148,"description":149},"outpost24","Outpost24","\u002Fvendor-logos\u002Foutpost24.png","outpost24-easm","Outpost24 EASM","https:\u002F\u002Foutpost24.com\u002Fproducts\u002Fexternal-attack-surface-management\u002F","Discovery and risk assessment of internet-facing assets.",{"vendor_slug":151,"vendor_name":152,"vendor_logo":153,"product_slug":154,"product_name":155,"url":156,"description":157},"watchtowr","watchTowr","\u002Fvendor-logos\u002Fwatchtowr.png","watchtowr-platform","watchTowr Platform","https:\u002F\u002Fwatchtowr.com\u002Fplatform\u002F","Continuous discovery of internet-facing assets, with automated testing for exploitable vulnerabilities.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},[160],{"slug":161,"name":26,"logo_path":162,"roles":163},"f5","\u002Fvendor-logos\u002Ff5.png",[164],"reported_by",{"slug":166,"title":167,"body":168,"framework_refs":169,"framework_notes":181},"exposed-vite-dev-servers-leaking-cloud-credentials-via-cve-2026-39364","Exposed Vite Dev Servers Leaking Cloud Credentials via CVE-2026-39364","Development servers intended for local use were left exposed to the public internet, creating an easily exploitable attack surface. CVE-2026-39364 allows unauthenticated attackers to bypass file access controls and retrieve sensitive environment files containing AWS and Azure cloud credentials — a critical failure of both configuration discipline and patch management. Development environments frequently store production-equivalent secrets, meaning a single exposed dev server can compromise an entire cloud infrastructure. The use of Google Cloud IP ranges for evasion highlights that attackers are actively employing trusted infrastructure to evade detection, making this threat harder to block by simple IP filtering.",[170,171,172,173,174,175,176,177,178,179,180],"CIS Control 1: Inventory and Control of Enterprise Assets","CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 CM-6: Configuration Settings","NIST SP 800-53 AC-17: Remote Access","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST SP 800-53 SC-7: Boundary Protection","NIST SP 800-53 IA-5: Authenticator Management (credential rotation)","OWASP Top 10 A05:2021 Security Misconfiguration","GDPR Article 32: Security of Processing (for EU-regulated organizations storing personal data in cloud environments)",{}]