LiteLLM Compromised: Credential Stealer in 1.107.0
Your AI gateway might have handed over cloud keys before you ever imported the package, because the popular LiteLLM Python package was compromised in a sof...
Found 81 relevant articles matching your search. Browse our cybersecurity insights and expert analysis below.
Your AI gateway might have handed over cloud keys before you ever imported the package, because the popular LiteLLM Python package was compromised in a sof...
Your npm install might have handed a stranger your browser cookies, your wallet files, and a persistent backdoor, because researchers just documented a fak...
Your GitHub repository might already be carrying a workflow you never wrote, because researchers just disclosed an ongoing credential-theft campaign that c...
Researchers just found something new, and it's not the malware itself that's interesting, it's where it was hiding, because a Go-based implant has been dis...
A malicious npm package called indexed-btree has been caught hiding its payload inside application code, rather than using lifecycle scripts, which is a si...
CISA added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog on Friday. All three are being exploited in the wild. Red Hat...
Docker Sandboxes is supposed to keep AI coding agents contained. Each agent runs in its own little virtual machine. The project folder is shared in. Everyt...
Everyone's talking about how AI is speeding up attacks. And it is. But here's the thing. Skilled humans can still move just as fast. Sometimes faster. Sys...
Our blog insights are backed by hands-on service delivery. Whether you need a penetration test, vulnerability assessment, emergency website recovery, or secure web development — our UK cybersecurity specialists are ready to help.
Emergency malware removal, backdoor elimination, blacklist delisting, and full post-incident hardening for compromised websites.
Authorised simulated attacks exposing real vulnerabilities in your web applications, networks, and infrastructure before attackers do.
Systematic identification and prioritisation of security weaknesses across your digital estate — with actionable remediation guidance.
OWASP-aligned web application development with security engineered in from architecture through to penetration-tested deployment.
Simulated, targeted adversarial attacks that test your people, processes, and technology under real-world conditions.
© 2016 – 2026 Red Secure Tech Ltd. Registered in England and Wales — Company No: 15581067