Piece of news of the day

ADVANCED SECURITY EUROPA

EOOD

Cloudy with a Chance of Compromise: OVHcloud Warns Users of Information-Stealing Malware Attack

20 October 2026

French cloud and hosting provider OVHcloud recently experienced a security incident where attackers compromised their CLI tool to distribute malware.
The attackers hijacked a developer's GitHub account to modify versions 0.11.0 through 0.15.0 of the tool.
CEO Octave Klaba advised users to update or remove the compromised versions and revealed that the malware aimed to steal secrets from users' disks.
The incident was resolved by enabling GitHub's release immutability feature.
The attack was potentially part of a larger operation called GlassWorm, impacting various software development ecosystems.
Researchers found that the attacker had control over the compromised GitHub account for over six months.
The affected platforms were macOS, Linux, and Windows.
All users who ran the compromised binary were advised to change their secrets.