/
attack_type:remote_code_execution × victim_sectors:technology × victim_sectors:software × limpar

Resultados

2 casos · pág. 1/1

hacktron.ai · medium

AI-accelerated 0-day research widens attack surface: Vercel breach via Context.ai OAuth, GitHub IDE extension compromise, Warp Terminal RCE

A Hacktron researcher argues that AI-assisted vulnerability research is rapidly widening the enterprise attack surface. He cites recent breaches at Vercel and GitHub and a wave of critical CVEs in F5, Fortinet, Cisco, Palo Alto and ImageMagick. According to the author, the Vercel compromise began with a breach of the AI platform Context.a…

aikido.dev · · 3 fontes · 3 atualizações critical

LiteLLM 1.107.0 trojanizado no PyPI e em imagens Docker: infostealer e backdoor RCE via hooks de inicialização do Python

The LiteLLM release 1.107.0 (a widely used open source LLM proxy) was trojanized on PyPI on 21 October 2026 and carries a credential stealer plus a remote code execution backdoor. All seven wheels (Linux, macOS, Windows) drop three extra files in site-packages, two of which run whenever any Python process starts, even one that never impor…