Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
LiteLLM Supply Chain Compromise: Leaked Master Key Led to Malicious PyPI Package — Detection and Response Guide
Introduction LiteLLM disclosed on Friday that a threat actor pushed a malicious version of its widely deployed Python package after obtainin...
LiteLLM Supply-Chain Compromise: Malicious PyPI Package and Docker Images Steal Cloud Credentials — Detection and Response Guide
LiteLLM Release Pipeline Compromised: What Defenders Need to Do Right Now The LiteLLM project — one of the most widely deployed open-source ...
Storm-0940 ConnectWise Supply Chain Attack: Detecting and Containing AI-Accelerated ScreenConnect Compromise Across 2,200+ Tenants
Introduction Microsoft Threat Intelligence has publicly attributed a large-scale ConnectWise supply chain attack to Storm-0940, a China-link...
LiteLLM 1.107.0 Supply Chain Compromise: Detecting Python Startup Hook Credential Theft and Remediating Exposed AI Pipelines
Introduction Microsoft Threat Intelligence has published a detailed analysis of a supply chain compromise affecting LiteLLM 1.107.0, one of ...
k0t Edge Credential Harvesting + LiteLLM Supply Chain Infostealer Wave: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Five concurrent pulses published to AlienVault OTX on 2026-10-22 paint a coherent picture: credential theft is the dominant a...
LiteLLM 1.107.0 Supply Chain Compromise: PyPI Credential Stealer and Backdoor — Detection and Remediation Guide
Introduction The LiteLLM Python package — one of the most widely deployed libraries for routing calls to large language model APIs — has bee...
ConnectWise Supply-Chain Attack: Defending Microsoft 365 Tenants Against Compromised API Secret Abuse
Introduction A supply-chain attack against ConnectWise — one of the most widely deployed MSP/TSP platforms in the managed services ecosystem...
Rank Math PRO Supply-Chain Compromise: Backdoored WordPress SEO Plugin — Detection and Remediation Guide
Rank Math PRO Supply-Chain Compromise: Backdoored WordPress SEO Plugin — Detection and Remediation Guide What Happened Last week, attackers ...
AOMEI Update Server Hijack: Detect and Contain Malicious Promo/Update Delivery in Backup Software
AOMEI Update Server Hijack: Detect and Contain Malicious Promo/Update Delivery in Backup Software What happened Attackers reportedly comprom...