Help Net Security

LiteLLM hit by second supply chain attack this year, users urged to rotate credentials

A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets ...

Python Defenses for the Day Your AI Library Gets Hijacked: Four Layers of Pinning, Cooldown, Verification, and Monitoring—What Gets Stopped, What Gets Through, …

This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...
Tech Times

China’s AI Agent Hacked 2,250 Microsoft 365 Tenants in Hours; MFA Didn’t Apply

China hackers agentic AI attack breached 2,250 Microsoft 365 tenants by exploiting a stolen ConnectWise Cloud Backup credential that bypassed MFA, Microsoft Threat Intelligence confirmed Wednesday, ...

PHP Vulnerability Response: Are You Only Doing It for Work? A Checklist for Personal Sites and Development Environments

Thank you for your hard work dealing with the recent string of vulnerabilities. It is difficult to stay calm when you have to ...