Multiple tech companies and projects have recently pushed patches for a vulnerability called "HTTP2Shell" which could enable remote code execution (RCE) attacks, similar to the recent "PHP2Shell" ...
Stolen tokens and unrotated credentials drove a wave of supply chain attacks. Use these steps to protect your pipeline and your customers.
LiteLLM supply chain attack: 1.107.0 shipped a credential stealer to PyPI and Docker on Oct. 21, two days after OVHcloud CLI ...
The other day, I saw the news about a critical vulnerability in PHP, which made me think about it all over again.On October ...
Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
Node.js released emergency patches for three versions to fix a critical Brotli compression library flaw (CVE-2026-111497) ...
OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets, and AI keys.
This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...
Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
Recent cybersecurity incidents have raised concerns among companies and government agencies regarding digital certificates ...
Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, and CI/CD secrets.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results