/
attack_type:credential_theft × latest_source_host:thehackernews.com × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · critical

LiteLLM 1.107.0 PyPI and Docker Supply Chain Compromise Delivers privcollect Credential Stealer and Backdoor

The widely used LiteLLM Python package was compromised in a software supply chain attack. Malicious version 1.107.0 was published via PyPI wheels and Docker images, delivering a credential stealer and a backdoor, per reports from SafeDep, Socket, StepSecurity and Upwind. LiteLLM says the release was pushed through three engineers' GitHub …

technology software development
thehackernews.com · critical

ConnectWise application identities compromised, enabling attacker access to Microsoft 365 tenants; Cloud Backup suspended

ConnectWise disabled seven application identities on October 17, 2026 after unknown threat actors gained unauthorized access to them and used them to compromise Microsoft 365 tenants. The company detected the issue on October 14 and has suspended Cloud Backup, SaaS Security and Cloud Management while it investigates. Huntress observed alm…

managed service providers policy