/
loss_type:data × victim_sectors:software × latest_source_host:bleepingcomputer.com × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · critical

LiteLLM release pipeline compromised: PyPI 1.107.0 and Docker images distribute credential-stealing malware

On October 21, attackers compromised the release pipeline of LiteLLM, an open-source Python SDK and AI gateway with about 92 million monthly PyPI downloads. They published malicious version 1.107.0 to PyPI, Docker Hub and GHCR. The payload steals cloud, AI, developer and browser credentials and loads remote-code execution tools. All seven…

technology software
bleepingcomputer.com · · 2 fontes · 2 atualizações high

Lazarus Group's Operation FlashHole hits South Korean firms via INISAFE CrossWeb EX abuse, GitHub C2 and ML-KEM-1024 post-quantum payload delivery

Kaspersky's analysis of Operation FlashHole describes a Lazarus Group campaign against South Korean organizations. It follows Operation SyncHole and is placed within the broader Cascade Hole activity. The earliest evidence dates to July 2025 (securelist.com, bleepingcomputer.com), and Kaspersky identified at least three victims in the sof…

Lazarus Group software construction