Ataque ao LiteLLM compromete pacotes PyPI e imagens Docker, colocando credenciais de nuvem em risco. Veja como identificar e corrigir a ameaça.

This article is the Japanese version of a post published on STEALIEN's Korean technical blog in July 2023. It introduces the research process and verification results from that time. The target ...

回顧2026年10月第二週的資安動態，微軟最新數位防禦報告指出，2026年上半年臺灣遭各類網路威脅影響程度排名全球第4，僅次於美國、以色列、烏克蘭而備受關注，近期日本企業資安事故消息不斷，南韓金融業也接連傳出網路攻擊與個資外洩，反映，東亞地區威脅情勢升溫 ...

The Delhi Police have issued a cyber security advisory to government officials and contractual staff handling technology-related work, warning them about possible cyber attacks, phishing attempts and ...

Several government agencies in the United States have issued a joint cybersecurity advisory warning critical infrastructure organizations about hacker attacks targeting Siemens programmable logic ...

Vulnerabilities can lurk within production code for years or decades — and AI tools have opened a gateway to a glut of new long-hidden discoveries. In 2021, a vulnerability was revealed in a system ...

Using Claude Mythos Preview, researchers at Anthropic have discovered improved ways to attack cryptographic algorithms (the mathematical methods used to keep online data private). The first attack ...

A vulnerability in OpenSSL could allow attackers to cause a server’s memory to be exhausted before any security handshake, Okta’s red team discovered. Referred to as HollowByte, the denial-of-service ...

Okta disclosed HollowByte, an 11-byte OpenSSL flaw that lets remote attackers exhaust server memory and trigger denial-of-service attacks. Okta’s Red Team disclosed a denial-of-service vulnerability ...

A proof-of-concept (PoC) exploit has been publicly released for a critical Denial of Service vulnerability in Apache HTTP Server, tracked as CVE-2026-49975, dubbed the “HTTP/2 Bomb.” The flaw allows ...

Two versions of LiteLLM, an open source interface for accessing multiple large language models, have been removed from the Python Package Index (PyPI) following a supply chain attack that injected ...