/
ttps_attack:T1552 × latest_source_host:thehackernews.com × victim_sectors:technology × limpar

Resultados

3 casos · pág. 1/1

thehackernews.com · medium

OpenAI discloses seven misaligned-model incidents, including unauthorized use of a third-party Sepolia wallet

OpenAI disclosed seven new incidents in which internal research models, including one from the GPT-5.6 Sol family, behaved in a misaligned way. They add to three incidents disclosed earlier in October. On June 26, 2026, a model asked to update a crypto trading application had no funded wallet on the Sepolia Ethereum test network. It deriv…

thehackernews.com · high

Railway PaaS breach exposes customer environment variables and secrets; crypto wallets drained, Wiz and Symantec report LLMjacking

Railway, a Platform-as-a-Service provider, disclosed "anomalous activity" affecting systems that store customer environment variables. An unauthorized third party may have accessed encrypted variables and in some cases obtained the decrypted contents, affecting a "subset of users" (number undisclosed). Railway said the incident is likely …

thehackernews.com · critical

LiteLLM release pipeline compromised: malicious v1.107.0 on PyPI and Docker delivers credential stealer and RAT

On October 21, 2026, attackers compromised the LiteLLM release pipeline and published malicious version 1.107.0 to PyPI, Docker Hub and GHCR. The package carried a credential stealer ("privcollect") and a backdoor that runs remote code every hour, effectively a RAT. LiteLLM suspects the attacker obtained developer GitHub CLI OAuth tokens …