Survival LLM: AI assistant and emergency library that runs on your own computer
Hacker News ·
Every story on Updated that mentions Large Language Models, newest first. Each headline links to a summary page with the original source, so you can scan the topic in under a minute.
Hacker News ·
Android Authority ·
Credit: Andy Walker / Android Authority TL;DR Third-party Android app stores can now enroll in the Registered App Stores program. App stores that enroll will get a new streamlined installation flow when it launches on December 1. This...
Hacker News ·
Help Net Security · · Medium severity
Madhu Shashanka, Chief Scientist at Concentric AI, explains why securing LLM tools and agents depends more on your data than on the model. Controls on model behavior, such as guardrails and injection detection, lower the rate of bad...
The Register · · Critical severity
LiteLLM has traced last week’s supply chain attack to a master key it accidentally committed to a public GitHub repository in May. The cloud and AI model secret-stealing part of the incident began when someone uploaded a poisoned...
TechRadar · · Medium severity
Rogue AI agent engages 'Skynet mode' to search the internet for exposed LLMs to hijack and run malware attacks
Hacker News ·
The Record by Recorded Future · · Medium severity
LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was behind a supply-chain attack that is believed to have hit tens of thousands of users last week.
AlienVault OTX · · High severity
On October 21, 2026, LiteLLM version 1.107.0 was compromised and distributed through PyPI and official container images. The malicious package leveraged Python startup mechanisms to execute credential-stealing payloads automatically,...
The Register ·
European open source database service provider Aiven says it has saved 80 percent of its AI token costs internally by moving to open-weight models and is building a gateway to help devs swap models in and out as required. The...
CIO&Leader ·
CloudKeeper, an AI and cloud cost optimization partner, today announced the launch of Full Stack FinOps for AI, a platform designed to help businesses track AI-related expenditure across models, applications, software licenses, and...
Hacker News ·
Hacker News ·
Hacker News ·
The Hacker News · · Medium severity
LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. "On May...
Hacker News ·
Microsoft Security Blog · · High severity
In this article Attack overview Technical details Mitigation and protection guidance Indicators of compromise References Learn More On October 21, 2026, a compromised LiteLLM 1.107.0 release was published to the Python Package Index...
TechRadar ·
Efosa has been writing about technology for over 7 years, initially driven by curiosity but now fueled by a strong passion for the field. He holds both a Master's and a PhD in sciences, which provided him with a solid foundation in...
TNW · · Medium severity
LiteLLM says hackers took the keys they needed from its own logs. They used them to publish a poisoned version of its software on Wednesday. The open-source AI gateway explained it in an incident report.
SecurityWeek · · Critical severity
Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek .
TelecomLead ·
Today’s telecom news includes announcements on SpaceX, FCC, Starlink, Tillman Fiber, DE-CIX, Florida FTTH Expansion, among others. AT&T tower SpaceX Secures FCC Approval for Starlink Mobile Spectrum Expansion SpaceX has received...
Hacker News ·
BleepingComputer · · Medium severity
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
PYMNTS.com ·
Stord has acquired third-party logistics provider AMS Fulfillment, adding more than 1 million square feet of warehouse space and expanding its capacity to handle orders for consumer brands as it invests in artificial intelligence and...
Help Net Security · · Critical severity
A malicious release of LiteLLM pushed to PyPI and Docker registries on Wednesday carried malware built to harvest cloud logins, developer secrets and API keys for AI services from anyone who installed it. “LiteLLM got compromised…...
CSO Online Security · · High severity
Hackers hijacked the software release pipeline of LiteLLM, a popular open-source AI gateway, to distribute credential-stealing malware, marking the project’s second supply chain compromise this year despite security measures introduced...
AlienVault OTX · · Critical severity
LiteLLM version 1.107.0 was compromised through a supply chain attack affecting both PyPI packages and Docker images. The malicious release contains Python startup files that automatically execute upon Python initialization, stealing...
Hacker News ·
The Hacker News · · Medium severity
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's...
AlienVault OTX ·
Attackers have developed an autonomous offensive agent that scans the internet for exposed large language model endpoints and hijacks them to execute attacks. The agent is equipped with 74 offensive tools covering reconnaissance,...
AlienVault OTX · · High severity
On October 21, 2026, attackers compromised litellm version 1.107.0, a popular Python proxy library for LLM providers with approximately 23 million weekly downloads. The malicious release was available on PyPI and official Docker images...
Hacker News ·
Hacker News ·
Hacker News ·
The Register · · Critical severity
Unknown crims compromised LiteLLM's release process on Wednesday, distributing a malicious version (1.107.0) containing malware designed to steal cloud and AI credentials and a remote access trojan (RAT) capable of executing arbitrary...
The Hacker News · · Critical severity
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise...
PYMNTS.com ·
CareCredit, a solution from consumer financing company Synchrony, has launched an enhanced and rebranded installment loan product that helps consumers plan and pay for products and elective health and wellness expenses not covered by...
Hacker News · · Medium severity
AlienVault OTX · · Medium severity
Threat actors are conducting sophisticated campaigns targeting Google Cloud Platform environments through phishing attacks via sponsored search ads. Attackers compromise privileged user credentials using fake login pages, then...
MIT Technology Review ·
Large language models are set to go lunar. A computer capable of running AI software is one of the payloads aboard Astrolab’s FLIP lunar rover, which is slated to head to Earth’s celestial companion as early as November 2026. The...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free