Tencent Cloud Releases Xinference Supply Chain Poisoning Risk Notice

Mars Finance reports that Tencent Cloud announced that Tencent Cloud Security Center detected that Xinference has been disclosed to have supply chain poisoning risks. This could allow attackers to steal highly sensitive information such as cloud credentials, API keys, SSH keys, encrypted wallets, database credentials, and environment variables when users install or import affected versions of the package, and send them to remote command and control (C2) servers.

View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin