LiteLLM Supply Chain Attack Traced to Unrevoked Master Key
LiteLLM investigators traced a poisoned Python release to an unrevoked master key, stolen GitHub tokens and abused workflows. Exposed secrets require rotation.
Read more →Latest articles in Malware
LiteLLM investigators traced a poisoned Python release to an unrevoked master key, stolen GitHub tokens and abused workflows. Exposed secrets require rotation.
Read more →
US, UK and Dutch agencies warn that HEAVYGRAM spyware targets dissidents and journalists through deceptive messages, enabling surveillance and data theft.
Read more →
Attackers exploited a Sogou Input Method flaw to deploy GrayRabbit on Windows. Researchers detail the attack chain and urge users to install the latest update.
Read more →
A multinational operation isolated more than 15,000 Sality-infected computers, seized linked domains and blocked the botnet operator's command channel.
Read more →
Infostealer malware is stealing active Claude sessions to hijack accounts and consume AI usage, prompting session revocation and endpoint cleanup guidance.
Read more →
ToxicPanda Android malware now targets 349 finance apps, abusing VPN, Accessibility and Wireless ADB features to seize deeper control of infected phones.
Read more →
Android car head unit malware spread through a legitimate updater, creating proxy botnet nodes for traffic relaying and online advertising fraud operations.
Read more →
Three Rust crates were poisoned to run credential-stealing malware during builds, exposing developer and CI systems before crates.io removed the releases.
Read more →
ChainDrop compromised hundreds of npm packages tied to Keyv and Cacheable, stealing developer credentials and spreading through trusted publishing access.
Read more →
CaptiveCrunch hijacks hotel Wi-Fi traffic to steal Microsoft 365 access and deliver CornFlake surveillance malware, Microsoft warns travelers worldwide.
Read more →