// security

$ tail -f ./security

Headlines from early disclosure channels, research labs and curated news, each with a short summary.

live updated 23 Oct, 23:55
last 24 h 71 headlines
sources 37

# Today

  1. Microsoft Threat Intel research infra

    Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

    Analysis of the LiteLLM 1.107.0 supply chain compromise describes credential theft through Python startup hooks and remote code loading.

    microsoft.com

# 21 Oct

  1. Microsoft Threat Intel research infra

    AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

    Storm-0940 used AI to accelerate a ConnectWise supply chain compromise and abuse application credentials in Microsoft 365 environments.

    microsoft.com