/
data_types_exposed:credentials × limpar

Resultados

182 casos · pág. 10/10

wired.com · · 5 fontes · 5 atualizações high

AdFection: Discover-Tech ads delivered Candiru zero-click spyware to at least 45 Al Jazeera devices, Citizen Lab reports

The Citizen Lab disclosed AdFection on 15 October 2026. It calls this the first public technical confirmation of zero-click mercenary spyware delivered to real devices through targeted online advertising. The Israeli ad firm Discover-Tech (spelled Discovere-Tech by bleepingcomputer.com) posed as a legitimate ad company while acting as a b…

theregister.com · · 5 fontes · 5 atualizações critical

LiteLLM 1.107.0 trojanized on PyPI and Docker images via stolen GitHub tokens: infostealer and RCE backdoor through Python startup hooks

The LiteLLM release 1.107.0 (a widely used open source LLM proxy and AI gateway developed by BerriAI, about 23 million weekly downloads per theregister.com) was trojanized on PyPI on 21 October 2026 and carries a credential stealer (privcollect) plus a remote code execution backdoor. All wheels (Linux, macOS, Windows) drop three extra fil…