/
vendors:GitHub × criticity:critical × latest_source_host:thehackernews.com × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · critical

LiteLLM release pipeline compromised: malicious v1.107.0 on PyPI and Docker delivers credential stealer and RAT

On October 21, 2026, attackers compromised the LiteLLM release pipeline and published malicious version 1.107.0 to PyPI, Docker Hub and GHCR. The package carried a credential stealer ("privcollect") and a backdoor that runs remote code every hour, effectively a RAT. LiteLLM suspects the attacker obtained developer GitHub CLI OAuth tokens …

technology software
thehackernews.com · critical

Qilin and Settra exploit PAN-OS CVE-2026-0257; ThreatsDay roundup of new RATs, stealers, WordPress backdoor and Meta GitHub breach

Qilin and Settra ransomware groups are actively exploiting CVE-2026-0257, an authentication bypass in PAN-OS GlobalProtect and Prisma Access disclosed in May 2026, according to ReliaQuest. Because access arrives through the victim's own VPN, it can resemble legitimate remote work and go unnoticed until credential theft, lateral movement, …

CVE-2026-0257 Qilin Settra technology cryptocurrency