An open-source artificial intelligence model gateway allowed a threat actor to gain owner-level access to its entire GitHub ...

The other day, I saw the news about a critical vulnerability in PHP, which made me think about it all over again.On October ...

LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.

Recent cybersecurity incidents have raised concerns among companies and government agencies regarding digital certificates ...

LiteLLM version 1.107.0, distributed via PyPI, was found to contain code designed to steal credentials and a backdoor.

Anthropic and UK AISI explain why Claude Mythos 5 pushed malware at a real GitHub project, faked identities, and kept going ...

India’s top cyber and tech news for 23 October 2026: eMudhra investigation, PHP vulnerabilities, Bengaluru SIM-box arrests, ...

Attackers infiltrated LiteLLM s GitHub organisation eleven days before distributing malware through its software releases with newly recovered records ...

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.

LiteLLM says an unrevoked master key exposed on GitHub let an attacker poison version 1.107.0, downloaded an estimated 49,000 ...

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

An unrevoked LiteLLM master key enabled GitHub token theft and a malicious PyPI release that steals credentials and installs a backdoor.