CloudSEK Editorial

Blogs & Articles

Read all Blogs from this Author

Como um Servidor MCP Não Autenticado Levou a SSRF, LFI e Roubo de Credenciais AWS

A real-world AIVigil finding from a customer environment. One unprotected AI integration endpoint with no login required. An attacker chained Server-Side Request Forgery, Local File Inclusion, and live AWS credential exfiltration into a potential full infrastructure takeover. This is how it happened, and how AIVigil found it first.

Whitepapers and Reports

Read all Whitepapers and reports from this Author

No White papers or Reports found.

Knowledge Base

Read all knowledge base articles from this Author

AI Supply Chain Security: How to Defend the AI Stack

AI supply chains break where code review can't reach: models, datasets, and gateways. Learn the 7 attack types and 8 controls that defend the AI stack.

CI/CD Credential Exposure: What Attackers Steal From Pipelines and What to Rotate

CI/CD pipelines hold cloud keys, tokens, and signing material attackers steal through builds. Learn the 6 leak paths and the 5-wave rotation order that works.

How to Check If AI API Keys Have Been Leaked

After the 2026 LiteLLM supply chain breach, here's how to check if your AI API keys leaked, and what to do if they did.

Did the LiteLLM Breach Affect Indian Companies? What the Exposure Data Shows

CloudSEK's data links 7 Indian organizations to the LiteLLM supply chain incident. See what the exposure data shows, and what it doesn't confirm.