Kernel Sh

Security incidents tagged Kernel Sh. Newest first.

1 Kernel Sh incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

Brought to you byTinkerer Club

The private club for people who own their servers, run their own AI, and pay $0/month for software.

MediumPartly patched
Kernel (kernel.sh) breach: leaked API key led to logging data theft and cryptominers on browser servers
Browser-infrastructure provider Kernel (kernel.sh) disclosed on Nov 4 2026 that an attacker used a compromised Kernel API key from Oct 24, then on Oct 27 used it to reach a staff login at Kernel's logging provider and downloaded data that included a small number of Kernel API keys and app deployments' third-party secrets. On Nov 3 the same party used a compromised hosting-provider credential to access four GPU servers, three of which ran Kernel browser sessions, and tried to start cryptominers. Kernel says 0.28% of customers were affected, revoked and rotated the credentials, took the servers offline, and notified affected organizations. It believes the financially motivated actor was using the AI-assisted pentesting platform ARTEX. Kernel customers should follow any notice they got, rotate Kernel API keys and the third-party secrets used in their deployments, and prefer scoped keys.
Kernel (kernel.sh) hosted browser infrastructureSince Oct 24, 2026updated Nov 4, 2026, 21:17 UTC