Hardcoded root cloud credentials in application binaries in Silver Leaf Technologies

Hardcoded AWS cloud credentials in the Worksnaps client gave an attacker complete access the Worksnaps AWS infrastructure as AWS root account. An attacker might have gotten access to an AWS buckets with sensitive data, such as screenshots of user desktops. 

CVE-2025-10560

 

Read the full advisory here (s'ouvre dans un nouvel onglet)