LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.

A new study delivers the first formal cryptographic treatment of reversible data hiding in encrypted images, introducing a ...

From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.

Hackers exploit ClickFix to deploy malware loaders and Python tunnels on Windows, potentially enabling ransomware attacks.

Eight private keys belonging to Indian certificate authority eMudhra were recovered from public certificates in under a second, with one key ...

A scripting error during a key generation ceremony in April 2025 produced intermediate CA certificates with private keys ...

Argon2, bcrypt, and scrypt compared on OWASP 2026 parameters, real benchmarks, memory cost, and migration steps for password ...

Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys ...

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...

Security personnel around the world are on high alert Tuesday following the discovery of eight TLS certificates with private ...