LiteLLM Release Pipeline Hacked to Distribute Info-Stealer Malware
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
A critical vulnerability has been identified in Azure Kubernetes Configuration Service, allowing unauthorized attackers to elevate privileges over a network. Immediate attention is required from organizations to prevent potential security breaches.
A critical vulnerability in VM Inspector for Azure Virtual Machines allows unauthorized attackers to elevate privileges over a network, posing significant risks to organizations. Immediate patching is essential.
CVE-2026-96251 affects Microsoft PowerShell, allowing for remote code execution. Microsoft has released an informational fix for this issue.
'Context bombs' are a groundbreaking technique that misleads AI agents, reducing attack success rates by up to 91%. This innovative method raises the costs of successful attacks by 23 times.
CVE-2026-102204 is a critical vulnerability in the Windows Subsystem for Linux that allows for privilege escalation. Microsoft advises users to update to the latest version to ensure security.
OpenAI has announced that its latest model, GPT-6.1 Sol, significantly enhances the process of writing and migrating software in older programming languages. This advancement could reshape how organizations manage legacy systems.
Microsoft has acknowledged the CVE-2026-70074 vulnerability, which pertains to an information disclosure issue within Windows DNS. This article delves into the details and implications of this vulnerability.
A new vulnerability has been acknowledged in Windows Hyper-V, allowing for privilege escalation. Users are urged to apply patches swiftly to mitigate risks.
CVE-2026-96913 is a critical vulnerability that allows for elevation of privilege in the Windows Kernel. Microsoft has updated its acknowledgment, highlighting the importance of applying patches.
An OS command injection vulnerability in SiteGuard Server Edition is allowing attackers to execute commands as root on affected servers. This flaw poses a significant risk to the security of systems using this tool.
Noteworthy stories that might have slipped under the radar: ICS-Sniper attack, takedown of XWorm malware operators, and a $250k exploit for Chrome.
The CVE-2026-106426 vulnerability has been identified in Chromium, affecting Microsoft Edge. This race condition could impact user security.