An open-source artificial intelligence model gateway allowed a threat actor to gain owner-level access to its entire GitHub ...

Have you ever had the experience of buying a book thinking, "I'm going to start programming," only to stop after the first 20 ...

Recent cybersecurity incidents have raised concerns among companies and government agencies regarding digital certificates ...

Recently, I've had a vague idea that Cloudflare's services might be a great fit for the AI era, so I looked into the ...

Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.

Prompt injection test lab: build a 12-step Python harness that scores Claude, GPT, Gemini, Mistral and DeepSeek on 14 OWASP ...

LiteLLM supply chain attack: 1.107.0 shipped a credential stealer to PyPI and Docker on Oct. 21, two days after OVHcloud CLI ...

A compromised LiteLLM release bundled credential-stealing malware and a remote-access trojan. Anyone who ran version 1.107.0 ...

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...

An unrevoked LiteLLM master key enabled GitHub token theft and a malicious PyPI release that steals credentials and installs a backdoor.

LiteLLM was compromised in a fresh supply chain attack, and malicious packages were served to its users on both PyPI and Docker. The incident occurred on October 21 and involved v ...

China hackers agentic AI attack breached 2,250 Microsoft 365 tenants by exploiting a stolen ConnectWise Cloud Backup ...