7 article(s) in our index mention this organisation.
LiteLLM disclosed a significant security incident where threat actors exploited a compromised release pipeline to push a malicious version of the LiteLLM Python package. The attack leveraged compromised GitHub CLI creden…
At Pwn2Own Ireland 2026, researchers demonstrated a variety of exploits targeting Google Pixel 10 devices, earning a total of over $560,000. Other significant rewards were given for exploits targeting smart speakers, AI…
LiteLLM, an open-source AI gateway, has a significant security vulnerability stemming from a default administrator key (sk-1234) that allows attackers to access API keys, cloud IAM credentials, and potentially execute co…
Two men from Western Australia have been charged in connection with TeamPCP, a cybercriminal group responsible for a global supply-chain hacking campaign that targeted over 1000 organizations, including OpenAI and the Eu…
Researchers at Zenity discovered attackers are exploiting exposed AI endpoints, specifically Ollama and LiteLLM, to power offensive operations. Attackers leverage these AI agents – such as Strix and HexStrike AI – withou…
A critical vulnerability chain in LiteLLM, an open-source AI gateway, allows low-privilege users to escalate their permissions to full administrator and execute arbitrary code on the server. Researchers at Obsidian Secur…
Red Hat removed numerous software packages from its distribution pipeline after a compromised GitHub account was used to distribute credential-stealing malware. The attack, utilizing a variant of the Mini Shai-Hulud worm…
