2 CVEs published in the last four months and 11 stories. Exploited flaws first.
| CVE | CVSS | Severity | Product | Summary | Published |
|---|---|---|---|---|---|
| CVE-2026-13749 | 8.8 | high | snowflake cli | Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to | 119d ago |
| CVE-2026-13744 | 8.3 | high | snowflake cli | Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended | 119d ago |
ASOS is currently investigating a cybersecurity incident where unauthorized actors leveraged the company's official mobile application to disseminate threatening notifications to its customer base. The messages, sent directly through the app's notification system, asserted that the attackers had successfully breached Snowflake and subsequently gained access to ASOS customer data.
Security researchers at Wiz, a cloud security company, have identified a critical script injection vulnerability in a public GitHub repository maintained by Snowflake. The flaw, found in the `snowflakedb/snowflake-connector-net` repository, specifically affected its GitHub Actions workflows.
A recently disclosed vulnerability in Snowflake's GitHub Actions workflows could allow for command injection, according to researchers. The flaw, identified within the snowflakedb/snowflake-connector-net repository, reportedly enables the execution of arbitrary commands within a workflow through the submission of a specially crafted GitHub issue.
An autonomous AI agent successfully exploited a script injection vulnerability in a Snowflake GitHub repository, which had been inadvertently introduced by an AI coding assistant just five days prior. The incident, part of a sanctioned bug bounty program, saw an AI-powered "red agent" from Wiz discover and exploit the flaw, leading to the exfiltration of credentials without human intervention.
A 26-year-old Canadian man, Connor Riley Moucka of Kitchener, Ontario, has pleaded guilty to computer fraud and conspiracy charges related to hacking and extorting over 165 organizations that utilized the cloud provider Snowflake. Moucka, known by online monikers such as "Judische" and "Waifu," also admitted to stealing call and text history records belonging to more than 100 million AT&T…
A hacker has pleaded guilty in a U.S. court in connection with an incident involving Snowflake, a cloud data warehousing company. The individual, identified as Connor Riley Moucka, was extradited to the United States in July 2025 following an arrest in Canada.
A Canadian man has pleaded guilty to charges related to the hacking of customer accounts at cloud storage provider Snowflake, an incident that led to the theft of data from over 165 organizations. Connor Riley Moucka, 26, of Kitchener, Ontario, also known by the online monikers "Waifu" and "Judische," entered his plea in a federal court in Washington state. He faces a potential sentence of up…
A recent report indicates that a hacker has pleaded guilty in connection with the 2024 breaches of Snowflake customer accounts. The individual, Connor Riley Moucka, entered a guilty plea in Seattle federal court to charges including computer fraud, wire fraud, aggravated identity theft, and conspiracy. These intrusions reportedly impacted at least 165 organizations and exposed records…
A Canadian man has pleaded guilty to charges related to a widespread data theft scheme targeting accounts at cloud storage provider Snowflake. Connor Riley Moucka, 26, also known as Alexander Moucka and "Waifu," admitted to his involvement in accessing customer accounts and stealing data from at least 165 organizations, with the goal of extorting millions from victims. Moucka was arrested on…
A Canadian man has pleaded guilty to charges related to a widespread cyberattack campaign that compromised over 165 customer environments of the data storage platform Snowflake in 2024. Connor Moucka, also known by online aliases such as Waifu, Judische, Catist, and Ellyel8, was arrested in Kitchener, Ontario, on October 30, 2024, and extradited to the United States in March 2025. He faces up…
A Canadian national has pleaded guilty to charges related to a widespread hacking campaign targeting customers of the data storage platform Snowflake, which resulted in the compromise of information from at least 165 companies. Connor Riley Moucka, 26, from Kitchener, Ontario, entered his plea in a Washington state federal court on Wednesday, facing charges of computer fraud, wire fraud,…