LiteLLM Compromised, Steals Credentials | Wiz Blog
At 11:39 UTC on October 21, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI. This version was quarantined on PyPI as…
Year: 2026
No time to PHP around.
Critical PHP flaws threaten millions of websites. Weak certificates from an Indian authority spark a global security scramble. Investigators probe a U.S. consulting executive’s alleged…
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks
Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix attacks. The…
The AI Adoption Blind Spot: How Fake Tools Put Enterprises at Risk
AI adoption is accelerating across enterprises, with employees increasingly relying on platforms like ChatGPT, Claude, and Microsoft Copilot for everyday work. Cybercriminals are exploiting this…
AI Guardrails Aren’t Stopping Criminal Hackers
Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help them carry out their crimes.…
Google Chrome Integrates Gemini AI to Detect Fake Antivirus and Browser Update Scams
Google has enhanced Chrome’s AI-powered scam defenses with a new server-side Gemini model that detects fake antivirus alerts, fraudulent browser updates, and other deceptive websites.…
PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities
PHP releases emergency PHP2Shell fixes for two critical flaws allowing unauthenticated code execution. Website owners and hosting providers must update. PHP developers have released emergency…
NVIDIA unveils security architecture that can stop AI agents crossing set boundaries
NVIDIA’s OpenShell Reference Architecture is designed to help businesses control AI agents operating across enterprise infrastructure and local computing systems. It builds on NVIDIA’s existing…
WhatsApp’s chatbot was given hidden instructions to not mention privacy regulators
WhatsApp instructed its AI support chatbot not to recommend contacting privacy regulators when users couldn’t delete their accounts, researchers found. Privacy software company Redact discovered…
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects…
What to do as critical PHP flaws puts millions of websites at risk
Two critical vulnerabilities in PHP – the server-side language behind much of the public web – allow unauthenticated remote code execution (RCE) on affected servers.…
Suntory Oceania taps Databricks, Copilot Pro in AI drive
Key points Suntory Oceania is investing in Databricks and Copilot Pro while exploring native agentic options for its SAP core, digital and IT director Matt…