Hackers have exploited a chain of Ivanti Connect Secure (ICS) zero-day vulnerabilities to obtain unauthenticated root access ...

Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through ...

Incidents where API keys are leaked due to code written by developers, leading to cloud bankruptcy, are endless. When requesting code reviews from LLMs, cases where confidential credentials or unverif ...

Hackers used AI-assisted scripts to steal Linux passwords by tampering with shell files, maintain access and target sensitive data.

I sometimes receive calls like this from the presidents of companies I support: 'I've upgraded to ChatGPT Plus, so it's okay ...

Hackers are using fake Chocolatey and Microsoft Activation Scripts websites to distribute ArmorSteal, a Python-based malware family that can steal passwords, cryptocurrency wallets, browser cookies, ...

LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.

Who knew file servers could be this easy?

There are a jaw-dropping 5.35 billion internet users around the world. But you’d be surprised how many people are not aware ...

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...

Researchers uncover a global cyberattack campaign targeting Fortinet and Palo Alto devices, exposing over 70,000 credentials ...

Pluto Security tracks a Hugging Face cryptominer campaign using malicious Qwen2 models, Python loaders, reverse shells, and ...