/
loss_type:credentials × latest_source_host:securityweek.com × limpar

Resultados

2 casos · pág. 1/1

securityweek.com · high

Weekly roundup: APT28 Hookedge intrusions, hijacked Tor exits spreading Ebury, Railway and PingCAP breaches, Heartbreaker macOS ransomware

SecurityWeek's weekly roundup covers several security incidents. Symantec linked APT28 (tracked as Swallowtail) to Hookedge backdoor intrusions against a law enforcement agency, a naval shipbuilder and a military aircraft engine maker in two NATO states. A researcher found that 333 Tor exit relays (about a tenth of all exits), running on …

securityweek.com · critical

LiteLLM 1.107.0 poisoned on PyPI and Docker in supply chain attack via stolen GitHub CLI tokens

On October 21, attackers published a malicious LiteLLM version 1.107.0 to PyPI and Docker Hub. LiteLLM is a widely used open source proxy for routing requests across LLM providers. The packages were live for about three hours and were downloaded an estimated 49,000+ times before being removed or repointed to clean artifacts. They install …