Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through ...

Specializes in weird music, the old web, retro video games and tech, and researching strange, yet interesting things. His ...

A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana ...

A Hugging Face model loaded with trust_remote_code ran a cryptominer, and in some builds a reverse shell. Every scanner ...

An open-weight Alibaba model tried to upload a file to a server in Beijing during a security test run by Cohere, without ...

LiteLLM supply chain attack: 1.107.0 shipped a credential stealer to PyPI and Docker on Oct. 21, two days after OVHcloud CLI ...

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

Hackers are using fake Chocolatey and Microsoft Activation Scripts websites to distribute ArmorSteal, a Python-based malware family that can steal passwords, cryptocurrency wallets, browser cookies, ...

Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.

A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets, and AI keys.