Share story
Security AI

Baseten rotated GitHub token exposed in public container image

We wanted to use Baseten for inference. We ended up with admin access to Baseten GitHub repos - Strix Image: Primary
Security firm Strix disclosed that it found a working GitHub personal access token in the build history of a publicly downloadable Baseten container image in July. Strix said the token had administrative and push access to Baseten product, GitOps and Homebrew repositories, plus access to other private repositories. Baseten made the Harbor registry project private and rotated the token the next day, according to Strix's disclosure timeline.
Sources
strix.ai
In this story
Microsoft
Published by Tech & Business, a media brand covering technology and business. This story was sourced from strix.ai and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
AI Infrastructure
AI Infrastructure

Five technology giants commit more than $3T to future spending

Alphabet, Meta, Microsoft, Amazon and Oracle have committed more than $3T to future spending on data centres, leases, equipment and energy, The Next Web reported, citing Bloomberg. Alphabet accounts for more than $1T and Meta for more than $800B.

The Next Web
Security
Security

SSH setup bugs limited access from malicious Cursor extension

Coding errors likely prevented attackers from gaining remote access to many Windows and macOS systems exposed to the malicious Claude Code extension in Cursor's marketplace, BleepingComputer reports, citing Phorion's analysis.

Bleeping Computer
Products AI
Products AI

Five US tech companies' cash returns fall to a 15-year low share

Microsoft, Alphabet, Amazon, Meta and Oracle returned 9.3% of cash to shareholders in the first three quarters of 2026, Reuters reported, the smallest share in 15 years amid AI spending. The companies generated record amounts of cash over the same period.

Techmeme