The lures and the payloads.
An article joins this feed when it matches these terms. Each one is also a search of its own.
This incident isn’t just a cautionary tale for LiteLLM—it’s a wake-up call for the entire open-source community. The stakes are high: trust in ecosystems, user safety, and supply chain integrity. Without stricter security practices, such breaches will become the…
CloudSEK uncovered NEBULA, a malicious npm supply-chain campaign involving seven fake AI SDK packages distributed through four attacker-controlled accounts. Disguised as legitimate developer tools, these packages deploy a modified KNTRAT Windows trojan capable of stealthy remote access, camera and microphone…
We posted regular status updates during our investigation yesterday reflecting the scenario to the best of our knowledge as the investigation proceeded. The investigation was ongoing, and some assumptions and beliefs in those updates were later proven to be inaccurate…
A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16. He showed the attack working…
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done.
Beyond file storage, Drime lets users edit documents, review videos, request electronic signatures, and share files securely. And until Oct. 25, it's only $360. TL;DR: Get a lifetime of 10TB of Drime Secure Cloud Storage Advanced++ for $359.97 through Oct. 25. Drime is designed…
LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. "On May 27, 2026, a configuration file…
Power transactional and AI applications with an open-source distributed SQL database. Analyze data with SQL, full-text search, and vector search in a managed warehouse. Trusted and verified by innovation leaders around the world. Explore how TiDB ensures the confidentiality and…
Suhail Patel discusses how Monzo structures its software engineering organization and technical stack to ship safely hundreds of times a day. He shares insights into opinionated microservice abstractions, tenancy-based staging, static analysis checks, continuous profiling, demonstrating how a strong internal…
Imagine this scenario: It’s 2:00 AM, and your SOC detects that an external contractor’s laptop was compromised. His username is Dave. You check Dave’s permissions in AWS IAM: he only has access to a couple of staging deployment scripts. He has…