Security
CISA Adds Collabora and Arista VeloCloud Flaws to Known Exploited List
Federal agencies have until Oct. 26 to patch two critical, actively exploited bugs in widely used document and network management software.
Section
Security
Breaches, vulnerabilities, scams and how to stay safe online.
LiteLLM PyPI Supply Chain Attack Steals AI Dev Credentials
Attackers hijacked LiteLLM's release pipeline to push credential-stealing malware to PyPI, putting AI developers' cloud keys and API secrets at immediate risk.