Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
https://ift.tt/E0xhbWX researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
https://ift.tt/Os6VF0d researchers found a way to enter Microsoft SharePoint servers as any user, including an
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
https://ift.tt/7Z6YNlL malicious tool server connected to an AI coding assistant can quietly walk off with
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
https://ift.tt/RS6unb2 lot of security problems still begin with someone doing a completely normal thing. Cloning
Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development
https://ift.tt/5wlerfA Korea’s state hackers are no longer content to type prompts into public chatbots. One
Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development
https://ift.tt/wBskA1y is helping development teams produce far more code, far faster. But security teams still
New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the
OpenAI’s Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause
https://ift.tt/vOhK7Me has announced that it’s pausing some “internal activities” involving its upcoming artificial intelligence (AI)