<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>pwn.watch: OVHcloud incident updates</title>
  <link>https://pwn.watch/t/ovhcloud</link>
  <description>Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them.</description>
  <language>en</language>
  <lastBuildDate>Tue, 20 Oct 2026 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/t/ovhcloud/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>[critical] OVHcloud CLI releases backdoored on GitHub</title>
    <link>https://pwn.watch/i/ovhcloud-cli-github-infostealer</link>
    <guid isPermaLink="true">https://pwn.watch/i/ovhcloud-cli-github-infostealer</guid>
    <pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate>
    <category>critical</category>
    <description>&lt;p&gt;In mid-October 2026 OVHcloud said attackers hijacked a developer GitHub account and planted an information stealer in five releases of its open-source CLI. Users who installed those releases should treat workstations as compromised and rotate credentials.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; closed · &lt;strong&gt;Patch:&lt;/strong&gt; patched · &lt;strong&gt;Fixed in:&lt;/strong&gt; Clean releases after incident; reinstall from verified source&lt;/p&gt;</description>
  </item>
</channel>
</rss>
