LiteLLM supply chain attack hoovers up passwords and secrets
The Register (56 minutes ago)
Plus a RAT for good measure - get threat hunting now
Read the full story on The Register.
More from this category
Cybersecurity
The internet is having a very bad cybersecurity day
From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.
Cybersecurity
Eufy Security Wall Light Cam S4 Deal: Save $80 on This Versatile Gadget
This feature-packed security camera is the perfect way to keep an eye on your home and fam from afar.
Cybersecurity
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.
Cybersecurity
Two web emergencies in one week: guessable certificate keys and critical PHP bugs that leaked before patches
Eight intermediate certificates issued by India-based certificate authority eMudhra were found to have private keys so weak they can be calculated from the certificates themselves.
Cybersecurity
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind.
Cybersecurity
I use Bitdefender Total Security to protect all of my devices, and it’s down to $28 at Newegg
Bitdefender is my security tool of choice for my family’s devices. It combines threat detection with tools to safeguard privacy across ten devices for a year.
Latest from The Register
Artificial Intelligence
Nvidia woos wary Europeans with more open weights models
New embedding, parsing, and reranking models promise smarter agentic RAG workflows
Artificial Intelligence
AI will eat a fifth of tech budgets in 2027, but don’t expect it to pay for itself
Forrester says only isolated wins are likely, while ‘good enough’ open-weight models soak up the tokens
Hardware
Signal bug could keep your mic - and camera - on after hangup
Careful what you say after goodbye, or better yet, update your messaging app
Software
OpenBSD 8.0 beefs up virtual machines and gets a taste of Wine
Proposed port brings 64-bit Windows apps within reach
Latest digest
Week 42
EN
Popular stories
Sources
72 active sources
27 Turkish · 45 English
All sources
