Threat group TeamPCP exploited credentials stolen in the Trivy breach to push malicious versions of LiteLLM to PyPI, exposing ...
After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
Panther Labs (hereafter just Panther) describes itself as a complete AI security operations centre (SOC) platform that is ...
The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...
Ocean Network links idle GPUs with AI workloads through a decentralized compute market and editor-based orchestration tools.
Malicious LiteLLM 1.82.7–1.82.8 via Trivy compromise deploys backdoor and steals credentials, enabling Kubernetes-wide ...
Threats actors pounced on the vulnerability within hours of its disclosure, demonstrating that organizations have little time ...
Qualys reports the discovery by their threat research unit of vulnerabilities in the Linux AppArmor system used by SUSE, Debian, Ubuntu, and ...
AI is burying open source maintainers under a flood of automated security reports they don't have the time or tools to ...
A phishing campaign targeting healthcare, government, hospitality, and education sectors uses several evasion techniques to ...
Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across ...