An open-source artificial intelligence model gateway allowed a threat actor to gain owner-level access to its entire GitHub ...
Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...
LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was ...
LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.
The other day, I saw the news about a critical vulnerability in PHP, which made me think about it all over again.On October ...
From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to ...
LiteLLM supply chain attack: 1.107.0 shipped a credential stealer to PyPI and Docker on Oct. 21, two days after OVHcloud CLI ...
Recent cybersecurity incidents have raised concerns among companies and government agencies regarding digital certificates ...
Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
LiteLLM says an unrevoked master key exposed on GitHub let an attacker poison version 1.107.0, downloaded an estimated 49,000 ...
When building a new Python service or spinning up a microservice architecture, the instinct is often to fire up your terminal ...