home.social

#supply-chain-attack — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #supply-chain-attack, aggregated by home.social.

fetched live
  1. 14 Trojanized npm Packages Deploy AI-Powered Linux Backdoor

    Researchers uncover 14 malicious npm packages that secretly install RedC2 4.0, an AI-assisted command-and-control framework designed to maintain stealthy access to Linux servers.

    pulseofnations.lol/14-trojaniz

    #AiMalware #Backdoor #LinuxMalware #Npm #Redc2 #SoftwareSupplyChain #SupplyChainAttack

  2. Kaspersky has identified a new malware family targeting Android car head units from DoFun. The malware abuses built-in OTA updaters to deploy ad fraud toolkits and proxy botnet infrastructure.

    #SupplyChainAttack #ProxyBotnet #AutomotiveSecurity #AdFraud

    cyberworldops.eu/en/malware-in

  3. 14 trojanized npm packages deliver RedShell, a Linux beacon for RedC2 4.0, to any system that imports them. Auto-execution requires no hooks or user interaction, making transitive dependency inclusion a direct compromise vector. Supply chain hygiene remains critical. #RedC2 #SupplyChainAttack #NPM #LinuxMalware

    cyberworldops.eu/en/npm-calend

  4. 🦀 Atac de tip Supply Chain în ecosistemul Rust: Pachetul extrem de popular arrayref (245M+ descărcări) a fost compromis!Pe 20 august 2026, comunitatea de securitate și echipa Rust Security Response Team au intervenit de urgență pentru a elimina versiuni contaminate ale câtorva crate-uri extrem de populare. Contul de menținător al dezvoltarorului David Roundy a fost compromis, permițând atacatorilor să lanseze versiuni otrăvite de pachete în doar câteva zeci de minute. ✨ Detaliile atacului și modul de funcționare:📦 Pachetele afectate și modul de infectare:• Versiunile otrăvite publicate au fost arrayref 0.3.10, internment 0.8.7 și append-only-vec 0.1.9.• Atacatorii au injectat o dependență nouă numită proc-macro1, un pachet typosquat ce imita cunoscutul proc-macro2. ⚡ Execuție la nivel de compilare (Build-Time RCE):• Codul malițios era ascuns în fișierul build.rs al dependenței proc-macro1.
    • Deoarece Cargo rulează fișierele build.rs automat în momentul compilării, simpla compilare a unui proiect care aducea indirect pachetele afectate executa malware-ul pe calculatorul dezvoltatorului, fără ca pachetul să fie apelat efectiv în cod. 🕵️ Payload și exfiltrare de date:• Scriptul descarca un binary specific sistemului de operare (Linux, macOS sau Windows).• Pachetul software funcționa ca un Infostealer, extras de date de sistem și de date de autentificare stocate în browsere bazate pe Chromium (Google Chrome, Brave, Microsoft Edge).• Analizele oferite de cercetători de securitate (cum ar fi Wiz) leagă infrastructura atacului de gruparea de hackeri nord-coreeni Sapphire Sleet. 🚨 Răspunsul rapid al echipei Rust:• Versiunile compromise au fost șterse complet de pe crates.io într-o fereastră de doar 86–107 minute de la publicare.• Contul afectat a fost securizat, iar pachetele au fost restaurate la versiunile sigure. 🔍 Ce trebuie să faci dacă lucrezi cu Rust?Verifică memoria cache locală din folderul Cargo pentru a te asigura că nu ai descărcat una dintre versiunile problematice:Bashfind ~/.cargo/registry/cache -type f \( -name 'arrayref-0.3.10.crate' -o -name 'internment-0.8.7.crate' -o -name 'append-only-vec-0.1.9.crate' -o -name 'proc-macro1-*.crate' \)
    Un memento serios că atacurile de tip supply chain rămân o amenințare majoră, chiar și în ecosisteme cu accent pe siguranță precum Rust! 🚀#Rust #RustLang #SupplyChainAttack #CyberSecurity #InfoSec #Arrayref #Cargo #Linuxiac #TechNews #OpenSource

  5. 🦀 Atac de tip Supply Chain în ecosistemul Rust: Pachetul extrem de popular arrayref (245M+ descărcări) a fost compromis!Pe 20 august 2026, comunitatea de securitate și echipa Rust Security Response Team au intervenit de urgență pentru a elimina versiuni contaminate ale câtorva crate-uri extrem de populare. Contul de menținător al dezvoltarorului David Roundy a fost compromis, permițând atacatorilor să lanseze versiuni otrăvite de pachete în doar câteva zeci de minute. ✨ Detaliile atacului și modul de funcționare:📦 Pachetele afectate și modul de infectare:• Versiunile otrăvite publicate au fost arrayref 0.3.10, internment 0.8.7 și append-only-vec 0.1.9.• Atacatorii au injectat o dependență nouă numită proc-macro1, un pachet typosquat ce imita cunoscutul proc-macro2. ⚡ Execuție la nivel de compilare (Build-Time RCE):• Codul malițios era ascuns în fișierul build.rs al dependenței proc-macro1.
    • Deoarece Cargo rulează fișierele build.rs automat în momentul compilării, simpla compilare a unui proiect care aducea indirect pachetele afectate executa malware-ul pe calculatorul dezvoltatorului, fără ca pachetul să fie apelat efectiv în cod. 🕵️ Payload și exfiltrare de date:• Scriptul descarca un binary specific sistemului de operare (Linux, macOS sau Windows).• Pachetul software funcționa ca un Infostealer, extras de date de sistem și de date de autentificare stocate în browsere bazate pe Chromium (Google Chrome, Brave, Microsoft Edge).• Analizele oferite de cercetători de securitate (cum ar fi Wiz) leagă infrastructura atacului de gruparea de hackeri nord-coreeni Sapphire Sleet. 🚨 Răspunsul rapid al echipei Rust:• Versiunile compromise au fost șterse complet de pe crates.io într-o fereastră de doar 86–107 minute de la publicare.• Contul afectat a fost securizat, iar pachetele au fost restaurate la versiunile sigure. 🔍 Ce trebuie să faci dacă lucrezi cu Rust?Verifică memoria cache locală din folderul Cargo pentru a te asigura că nu ai descărcat una dintre versiunile problematice:Bashfind ~/.cargo/registry/cache -type f \( -name 'arrayref-0.3.10.crate' -o -name 'internment-0.8.7.crate' -o -name 'append-only-vec-0.1.9.crate' -o -name 'proc-macro1-*.crate' \)
    Un memento serios că atacurile de tip supply chain rămân o amenințare majoră, chiar și în ecosisteme cu accent pe siguranță precum Rust! 🚀#Rust #RustLang #SupplyChainAttack #CyberSecurity #InfoSec #Arrayref #Cargo #Linuxiac #TechNews #OpenSource

  6. 🦀 Atac de tip Supply Chain în ecosistemul Rust: Pachetul extrem de popular arrayref (245M+ descărcări) a fost compromis!Pe 20 august 2026, comunitatea de securitate și echipa Rust Security Response Team au intervenit de urgență pentru a elimina versiuni contaminate ale câtorva crate-uri extrem de populare. Contul de menținător al dezvoltarorului David Roundy a fost compromis, permițând atacatorilor să lanseze versiuni otrăvite de pachete în doar câteva zeci de minute. ✨ Detaliile atacului și modul de funcționare:📦 Pachetele afectate și modul de infectare:• Versiunile otrăvite publicate au fost arrayref 0.3.10, internment 0.8.7 și append-only-vec 0.1.9.• Atacatorii au injectat o dependență nouă numită proc-macro1, un pachet typosquat ce imita cunoscutul proc-macro2. ⚡ Execuție la nivel de compilare (Build-Time RCE):• Codul malițios era ascuns în fișierul build.rs al dependenței proc-macro1.
    • Deoarece Cargo rulează fișierele build.rs automat în momentul compilării, simpla compilare a unui proiect care aducea indirect pachetele afectate executa malware-ul pe calculatorul dezvoltatorului, fără ca pachetul să fie apelat efectiv în cod. 🕵️ Payload și exfiltrare de date:• Scriptul descarca un binary specific sistemului de operare (Linux, macOS sau Windows).• Pachetul software funcționa ca un Infostealer, extras de date de sistem și de date de autentificare stocate în browsere bazate pe Chromium (Google Chrome, Brave, Microsoft Edge).• Analizele oferite de cercetători de securitate (cum ar fi Wiz) leagă infrastructura atacului de gruparea de hackeri nord-coreeni Sapphire Sleet. 🚨 Răspunsul rapid al echipei Rust:• Versiunile compromise au fost șterse complet de pe crates.io într-o fereastră de doar 86–107 minute de la publicare.• Contul afectat a fost securizat, iar pachetele au fost restaurate la versiunile sigure. 🔍 Ce trebuie să faci dacă lucrezi cu Rust?Verifică memoria cache locală din folderul Cargo pentru a te asigura că nu ai descărcat una dintre versiunile problematice:Bashfind ~/.cargo/registry/cache -type f \( -name 'arrayref-0.3.10.crate' -o -name 'internment-0.8.7.crate' -o -name 'append-only-vec-0.1.9.crate' -o -name 'proc-macro1-*.crate' \)
    Un memento serios că atacurile de tip supply chain rămân o amenințare majoră, chiar și în ecosisteme cu accent pe siguranță precum Rust! 🚀#Rust #RustLang #SupplyChainAttack #CyberSecurity #InfoSec #Arrayref #Cargo #Linuxiac #TechNews #OpenSource

  7. 🦀 Atac de tip Supply Chain în ecosistemul Rust: Pachetul extrem de popular arrayref (245M+ descărcări) a fost compromis!Pe 20 august 2026, comunitatea de securitate și echipa Rust Security Response Team au intervenit de urgență pentru a elimina versiuni contaminate ale câtorva crate-uri extrem de populare. Contul de menținător al dezvoltarorului David Roundy a fost compromis, permițând atacatorilor să lanseze versiuni otrăvite de pachete în doar câteva zeci de minute. ✨ Detaliile atacului și modul de funcționare:📦 Pachetele afectate și modul de infectare:• Versiunile otrăvite publicate au fost arrayref 0.3.10, internment 0.8.7 și append-only-vec 0.1.9.• Atacatorii au injectat o dependență nouă numită proc-macro1, un pachet typosquat ce imita cunoscutul proc-macro2. ⚡ Execuție la nivel de compilare (Build-Time RCE):• Codul malițios era ascuns în fișierul build.rs al dependenței proc-macro1.
    • Deoarece Cargo rulează fișierele build.rs automat în momentul compilării, simpla compilare a unui proiect care aducea indirect pachetele afectate executa malware-ul pe calculatorul dezvoltatorului, fără ca pachetul să fie apelat efectiv în cod. 🕵️ Payload și exfiltrare de date:• Scriptul descarca un binary specific sistemului de operare (Linux, macOS sau Windows).• Pachetul software funcționa ca un Infostealer, extras de date de sistem și de date de autentificare stocate în browsere bazate pe Chromium (Google Chrome, Brave, Microsoft Edge).• Analizele oferite de cercetători de securitate (cum ar fi Wiz) leagă infrastructura atacului de gruparea de hackeri nord-coreeni Sapphire Sleet. 🚨 Răspunsul rapid al echipei Rust:• Versiunile compromise au fost șterse complet de pe crates.io într-o fereastră de doar 86–107 minute de la publicare.• Contul afectat a fost securizat, iar pachetele au fost restaurate la versiunile sigure. 🔍 Ce trebuie să faci dacă lucrezi cu Rust?Verifică memoria cache locală din folderul Cargo pentru a te asigura că nu ai descărcat una dintre versiunile problematice:Bashfind ~/.cargo/registry/cache -type f \( -name 'arrayref-0.3.10.crate' -o -name 'internment-0.8.7.crate' -o -name 'append-only-vec-0.1.9.crate' -o -name 'proc-macro1-*.crate' \)
    Un memento serios că atacurile de tip supply chain rămân o amenințare majoră, chiar și în ecosisteme cu accent pe siguranță precum Rust! 🚀#Rust #RustLang #SupplyChainAttack #CyberSecurity #InfoSec #Arrayref #Cargo #Linuxiac #TechNews #OpenSource

  8. 🦀 Atac de tip Supply Chain în ecosistemul Rust: Pachetul extrem de popular arrayref (245M+ descărcări) a fost compromis!Pe 20 august 2026, comunitatea de securitate și echipa Rust Security Response Team au intervenit de urgență pentru a elimina versiuni contaminate ale câtorva crate-uri extrem de populare. Contul de menținător al dezvoltarorului David Roundy a fost compromis, permițând atacatorilor să lanseze versiuni otrăvite de pachete în doar câteva zeci de minute. ✨ Detaliile atacului și modul de funcționare:📦 Pachetele afectate și modul de infectare:• Versiunile otrăvite publicate au fost arrayref 0.3.10, internment 0.8.7 și append-only-vec 0.1.9.• Atacatorii au injectat o dependență nouă numită proc-macro1, un pachet typosquat ce imita cunoscutul proc-macro2. ⚡ Execuție la nivel de compilare (Build-Time RCE):• Codul malițios era ascuns în fișierul build.rs al dependenței proc-macro1.
    • Deoarece Cargo rulează fișierele build.rs automat în momentul compilării, simpla compilare a unui proiect care aducea indirect pachetele afectate executa malware-ul pe calculatorul dezvoltatorului, fără ca pachetul să fie apelat efectiv în cod. 🕵️ Payload și exfiltrare de date:• Scriptul descarca un binary specific sistemului de operare (Linux, macOS sau Windows).• Pachetul software funcționa ca un Infostealer, extras de date de sistem și de date de autentificare stocate în browsere bazate pe Chromium (Google Chrome, Brave, Microsoft Edge).• Analizele oferite de cercetători de securitate (cum ar fi Wiz) leagă infrastructura atacului de gruparea de hackeri nord-coreeni Sapphire Sleet. 🚨 Răspunsul rapid al echipei Rust:• Versiunile compromise au fost șterse complet de pe crates.io într-o fereastră de doar 86–107 minute de la publicare.• Contul afectat a fost securizat, iar pachetele au fost restaurate la versiunile sigure. 🔍 Ce trebuie să faci dacă lucrezi cu Rust?Verifică memoria cache locală din folderul Cargo pentru a te asigura că nu ai descărcat una dintre versiunile problematice:Bashfind ~/.cargo/registry/cache -type f \( -name 'arrayref-0.3.10.crate' -o -name 'internment-0.8.7.crate' -o -name 'append-only-vec-0.1.9.crate' -o -name 'proc-macro1-*.crate' \)
    Un memento serios că atacurile de tip supply chain rămân o amenințare majoră, chiar și în ecosisteme cu accent pe siguranță precum Rust! 🚀#Rust #RustLang #SupplyChainAttack #CyberSecurity #InfoSec #Arrayref #Cargo #Linuxiac #TechNews #OpenSource

  9. الاختراق المزدوج: قصة هجوم سلاسل التوريد المعقد على شركة 3CX

    البداية والهدف تُعد شركة 3CX واحدة من أشهر الشركات العالمية الموفرة لأنظمة الاتصالات والبدالات الرقمية (VoIP)، حيث يستخدم تطبيقها أكثر من 600,000 شركة و12 مليون مستخدم يومياً، مما جعل التطبيق هدفاً استراتيجياً لاختراق آلاف المؤسسات دفعة واحدة كيف سقط الفخ؟ في مارس 2023، حدث هجوم […]

    cybercases8.wordpress.com/2026

  10. الاختراق المزدوج: قصة هجوم سلاسل التوريد المعقد على شركة 3CX

    البداية والهدف تُعد شركة 3CX واحدة من أشهر الشركات العالمية الموفرة لأنظمة الاتصالات والبدالات الرقمية (VoIP)، حيث يستخدم تطبيقها أكثر من 600,000 شركة و12 مليون مستخدم يومياً، مما جعل التطبيق هدفاً استراتيجياً لاختراق آلاف المؤسسات دفعة واحدة كيف سقط الفخ؟ في مارس 2023، حدث هجوم […]

    cybercases8.wordpress.com/2026

  11. LiteLLM Supply-Chain Attack Hits 2,500+ Orgs

    TeamPCP compromised the popular AI gateway library, exposing GitHub tokens, cloud keys and API secrets across Microsoft, NVIDIA, IBM and hundreds more

    pulseofnations.lol/litellm-sup

    #AiSecurity #CredentialTheft #Cybersecurity #Litellm #Pypi #Sandclock #SupplyChainAttack #Teampcp

  12. LiteLLM Supply-Chain Attack – Technology, Banking and Healthcare the Most Affected

    LiteLLM Supply-Chain Attack – Technology, Banking and Healthcare the Most Affected Pierluigi Paganini August 17, 2026 The SANDCLOCK…
    #NewsBeep #News #Healthcare #AU #Australia #Cybercrime #hacking #hackingnews #Health #informationsecuritynews #ITInformationSecurity #LiteLLM #Malware #PierluigiPaganini #SANDCLOCKbackdoor #SecurityAffairs #SecurityNews #supplychainattack #TeamPCP
    newsbeep.com/au/859591/

  13. A supply chain attack on the open source project LiteLLM distributed a backdoor called SANDCLOCK via PyPI, exposing credentials of thousands of organizations in tech, finance, and healthcare. Attributed to TeamPCP through compromised maintainer accounts. Many victims may still be unaware.

    #SupplyChainAttack #LiteLLM #InfoSec #ThreatActor

    cyberworldops.eu/en/litellm-su

  14. A supply chain attack on the open source project LiteLLM distributed a backdoor called SANDCLOCK via PyPI, exposing credentials of thousands of organizations in tech, finance, and healthcare. Attributed to TeamPCP through compromised maintainer accounts. Many victims may still be unaware.

    #SupplyChainAttack #LiteLLM #InfoSec #ThreatActor

    cyberworldops.eu/en/litellm-su

  15. 📰 Clop Group Claims Massive Data Heist from Shell, Philips, GE via PTC Flaw

    Clop ransomware group claims massive data theft from Shell, Philips, GE, and 40+ others by exploiting a critical PTC Windchill vulnerability (CVE-2026-12569). #Clop #Ransomware #SupplyChainAttack

    🔗 cyber.netsecops.io/articles/cl

  16. Four suspects arrested in Brazil and three identified in Europe for exploiting a software vulnerability at a payment service provider. The attackers compromised interbank transfer infrastructure, generating roughly 30 million euros in losses across just four days in November 2023.

    #BankFraud #PaymentSecurity #SupplyChainAttack #CyberCrime

    cyberworldops.eu/en/bank-payme

  17. Four suspects arrested in Brazil and three identified in Europe for exploiting a software vulnerability at a payment service provider. The attackers compromised interbank transfer infrastructure, generating roughly 30 million euros in losses across just four days in November 2023.

    #BankFraud #PaymentSecurity #SupplyChainAttack #CyberCrime

    cyberworldops.eu/en/bank-payme

  18. Reward: You've received the Cursed Artifact — 434,000 Compromised Pipelines. It has no sell value. It does have consequences.

    #SupplyChainAttack #CyberSecurity #AIInfrastructure #TeamPCP #CICD #CriticalHitTaken (3/3)

  19. Reward: You've received the Cursed Artifact — 434,000 Compromised Pipelines. It has no sell value. It does have consequences.

    #SupplyChainAttack #CyberSecurity #AIInfrastructure #TeamPCP #CICD #CriticalHitTaken (3/3)

  20. Reward: You've received the Cursed Artifact — 434,000 Compromised Pipelines. It has no sell value. It does have consequences.

    #SupplyChainAttack #CyberSecurity #AIInfrastructure #TeamPCP #CICD #CriticalHitTaken (3/3)

  21. Hey everyone! Terabytes worth of #credentials, for more than 2500 massive Fortune 500 type orgs have been exposed in a supply-chain attack on #LiteLLM.

    The breach was reported Tuesday and Wednesday by security firms #CloudSEK and #HudsonRock. (Links below) CloudSEK said it found cloud keys, repository tokens, #SSH keys, #Kubernetes secrets, package publishing credentials, environment variables, and AI provider #keys.

    This, in the world of #infosec, is called A Bad Thing. The fact that some of the credentials are still live, is mind boggling.

    #ai #security #SupplyChainAttack #hack

    cloudsek.com/blog/ai-supply-ch

    Companies exposed: exposure.cloudsek.com/ai-suppl

    hudsonrock.com/blog/largest-ai

    ArsTecnica overview: arstechnica.com/security/2026/

  22. Hey everyone! Terabytes worth of #credentials, for more than 2500 massive Fortune 500 type orgs have been exposed in a supply-chain attack on #LiteLLM.

    The breach was reported Tuesday and Wednesday by security firms #CloudSEK and #HudsonRock. (Links below) CloudSEK said it found cloud keys, repository tokens, #SSH keys, #Kubernetes secrets, package publishing credentials, environment variables, and AI provider #keys.

    This, in the world of #infosec, is called A Bad Thing. The fact that some of the credentials are still live, is mind boggling.

    #ai #security #SupplyChainAttack #hack

    cloudsek.com/blog/ai-supply-ch

    Companies exposed: exposure.cloudsek.com/ai-suppl

    hudsonrock.com/blog/largest-ai

    ArsTecnica overview: arstechnica.com/security/2026/

  23. Hey everyone! Terabytes worth of #credentials, for more than 2500 massive Fortune 500 type orgs have been exposed in a supply-chain attack on #LiteLLM.

    The breach was reported Tuesday and Wednesday by security firms #CloudSEK and #HudsonRock. (Links below) CloudSEK said it found cloud keys, repository tokens, #SSH keys, #Kubernetes secrets, package publishing credentials, environment variables, and AI provider #keys.

    This, in the world of #infosec, is called A Bad Thing. The fact that some of the credentials are still live, is mind boggling.

    #ai #security #SupplyChainAttack #hack

    cloudsek.com/blog/ai-supply-ch

    Companies exposed: exposure.cloudsek.com/ai-suppl

    hudsonrock.com/blog/largest-ai

    ArsTecnica overview: arstechnica.com/security/2026/

  24. Hey everyone! Terabytes worth of #credentials, for more than 2500 massive Fortune 500 type orgs have been exposed in a supply-chain attack on #LiteLLM.

    The breach was reported Tuesday and Wednesday by security firms #CloudSEK and #HudsonRock. (Links below) CloudSEK said it found cloud keys, repository tokens, #SSH keys, #Kubernetes secrets, package publishing credentials, environment variables, and AI provider #keys.

    This, in the world of #infosec, is called A Bad Thing. The fact that some of the credentials are still live, is mind boggling.

    #ai #security #SupplyChainAttack #hack

    cloudsek.com/blog/ai-supply-ch

    Companies exposed: exposure.cloudsek.com/ai-suppl

    hudsonrock.com/blog/largest-ai

    ArsTecnica overview: arstechnica.com/security/2026/

  25. Hey everyone! Terabytes worth of #credentials, for more than 2500 massive Fortune 500 type orgs have been exposed in a supply-chain attack on #LiteLLM.

    The breach was reported Tuesday and Wednesday by security firms #CloudSEK and #HudsonRock. (Links below) CloudSEK said it found cloud keys, repository tokens, #SSH keys, #Kubernetes secrets, package publishing credentials, environment variables, and AI provider #keys.

    This, in the world of #infosec, is called A Bad Thing. The fact that some of the credentials are still live, is mind boggling.

    #ai #security #SupplyChainAttack #hack

    cloudsek.com/blog/ai-supply-ch

    Companies exposed: exposure.cloudsek.com/ai-suppl

    hudsonrock.com/blog/largest-ai

    ArsTecnica overview: arstechnica.com/security/2026/

  26. Rotate all CI/CD secrets, fully revoke stale automation tokens, and audit every pipeline variable that touches a cloud credential before it becomes someone else's loot drop.

    Reward: INVENTORY PENALTY — Your cloud credentials have been auto-equipped by a stranger. Their build stats are now higher than yours.

    #SupplyChainAttack #Credentials #CyberSecurity #CICD #CloudSecurity #SecretsExposed (3/3)

  27. Rotate all CI/CD secrets, fully revoke stale automation tokens, and audit every pipeline variable that touches a cloud credential before it becomes someone else's loot drop.

    Reward: INVENTORY PENALTY — Your cloud credentials have been auto-equipped by a stranger. Their build stats are now higher than yours.

    #SupplyChainAttack #Credentials #CyberSecurity #CICD #CloudSecurity #SecretsExposed (3/3)

  28. Rotate all CI/CD secrets, fully revoke stale automation tokens, and audit every pipeline variable that touches a cloud credential before it becomes someone else's loot drop.

    Reward: INVENTORY PENALTY — Your cloud credentials have been auto-equipped by a stranger. Their build stats are now higher than yours.

    #SupplyChainAttack #Credentials #CyberSecurity #CICD #CloudSecurity #SecretsExposed (3/3)

  29. A supply-chain attack on LiteLLM has exposed sensitive credentials from 2,488 companies, highlighting the risks in software dependencies. Organizations should rotate compromised secrets and strengthen CI/CD security practices to prevent future incidents.

    #CyberSecurity #SupplyChainAttack #LiteLLM #AI #DataBreach #CI/CD

    thedailytechfeed.com/litellm-s

  30. A #supplychainattack on the #opensource tool #LiteLLM exposed #terabytes of #credentials belonging to over 2,500 organisations, including Microsoft, Amazon, and Cisco. The attack, attributed to the group TeamPCP, exploited a #vulnerability in the #vulnerabilityscanner #Trivy and compromised versions of LiteLLM, KICS, and the Telnyx Python SDK. Security firms CloudSEK and Hudson Rock urge affected organisations to rotate credentials. arstechnica.com/security/2026/ #tech #news #ainews

  31. A #supplychainattack on the #opensource tool #LiteLLM exposed #terabytes of #credentials belonging to over 2,500 organisations, including Microsoft, Amazon, and Cisco. The attack, attributed to the group TeamPCP, exploited a #vulnerability in the #vulnerabilityscanner #Trivy and compromised versions of LiteLLM, KICS, and the Telnyx Python SDK. Security firms CloudSEK and Hudson Rock urge affected organisations to rotate credentials. arstechnica.com/security/2026/ #tech #news #ainews

  32. A #supplychainattack on the #opensource tool #LiteLLM exposed #terabytes of #credentials belonging to over 2,500 organisations, including Microsoft, Amazon, and Cisco. The attack, attributed to the group TeamPCP, exploited a #vulnerability in the #vulnerabilityscanner #Trivy and compromised versions of LiteLLM, KICS, and the Telnyx Python SDK. Security firms CloudSEK and Hudson Rock urge affected organisations to rotate credentials. arstechnica.com/security/2026/ #tech #news #ainews

  33. A #supplychainattack on the #opensource tool #LiteLLM exposed #terabytes of #credentials belonging to over 2,500 organisations, including Microsoft, Amazon, and Cisco. The attack, attributed to the group TeamPCP, exploited a #vulnerability in the #vulnerabilityscanner #Trivy and compromised versions of LiteLLM, KICS, and the Telnyx Python SDK. Security firms CloudSEK and Hudson Rock urge affected organisations to rotate credentials. arstechnica.com/security/2026/ #tech #news #ainews

  34. A #supplychainattack on the #opensource tool #LiteLLM exposed #terabytes of #credentials belonging to over 2,500 organisations, including Microsoft, Amazon, and Cisco. The attack, attributed to the group TeamPCP, exploited a #vulnerability in the #vulnerabilityscanner #Trivy and compromised versions of LiteLLM, KICS, and the Telnyx Python SDK. Security firms CloudSEK and Hudson Rock urge affected organisations to rotate credentials. arstechnica.com/security/2026/ #tech #news #ainews

  35. Payment and credential data survived, which we suppose is something. Supply chain delays rippled downstream like a stone dropped into a very expensive pond.

    Operators: audit your data exposure scope now, notify affected customers, and review warehouse network segmentation before the next incident writes a longer eulogy.

    Reward: You've received a Commemorative Cardboard Box — it ships in 6-8 weeks, supply chain pending.

    #CyberSecurity #DataBreach #CevaLogistics #SupplyChainAttack (2/2)

  36. Payment and credential data survived, which we suppose is something. Supply chain delays rippled downstream like a stone dropped into a very expensive pond.

    Operators: audit your data exposure scope now, notify affected customers, and review warehouse network segmentation before the next incident writes a longer eulogy.

    Reward: You've received a Commemorative Cardboard Box — it ships in 6-8 weeks, supply chain pending.

    #CyberSecurity #DataBreach #CevaLogistics #SupplyChainAttack (2/2)

  37. Payment and credential data survived, which we suppose is something. Supply chain delays rippled downstream like a stone dropped into a very expensive pond.

    Operators: audit your data exposure scope now, notify affected customers, and review warehouse network segmentation before the next incident writes a longer eulogy.

    Reward: You've received a Commemorative Cardboard Box — it ships in 6-8 weeks, supply chain pending.

    #CyberSecurity #DataBreach #CevaLogistics #SupplyChainAttack (2/2)

  38. LiteLLM Supply Chain Attack: How the Trivy Compromise Exposed CI/CD Credentials Across Thousands of Organizations

    2,500+ organizations may have been exposed after malicious LiteLLM releases stole 434,000 CI/CD files. See how the Trivy attack stole secrets

    thecybersecguru.com/news/litel

  39. LiteLLM, an open-source toolkit for AI-assisted development, was compromised via PyPI during a 40-minute window in March. The malicious versions exfiltrated credentials and secrets from 434,000 CI/CD pipelines. Hudson Rock analyzed 195 TB of data; the origin of the dataset has not been attributed yet.

    #SupplyChainAttack #PyPI #CI_CD #DevSecOps

    cyberworldops.eu/en/litellm-su

  40. LiteLLM, an open-source toolkit for AI-assisted development, was compromised via PyPI during a 40-minute window in March. The malicious versions exfiltrated credentials and secrets from 434,000 CI/CD pipelines. Hudson Rock analyzed 195 TB of data; the origin of the dataset has not been attributed yet.

    #SupplyChainAttack #PyPI #CI_CD #DevSecOps

    cyberworldops.eu/en/litellm-su

  41. KNOWN ISSUE: The FBI's July 2026 FLASH advisory notes affiliated actors may weaponize these credentials long after the original LiteLLM compromise. FIXED: Nothing. You fix it — rotate every exposed credential and Kubernetes token immediately.

    Reward: You've unlocked the Smoldering Pipeline Badge. It is not a good badge.

    #SupplyChainAttack #CyberSecurity #CICD #CloudSecurity #LiteLLM #TeamPCP (2/2)

  42. KNOWN ISSUE: The FBI's July 2026 FLASH advisory notes affiliated actors may weaponize these credentials long after the original LiteLLM compromise. FIXED: Nothing. You fix it — rotate every exposed credential and Kubernetes token immediately.

    Reward: You've unlocked the Smoldering Pipeline Badge. It is not a good badge.

    #SupplyChainAttack #CyberSecurity #CICD #CloudSecurity #LiteLLM #TeamPCP (2/2)