Organisation
Wiz
Appears alongside
Featured in threads
Tracks
- Security & misuse 2
- Open weights & ecosystem 1
- Safety & alignment 1
Malicious LiteLLM release steals credentials from AI developers
Version 1.107.0 sat on PyPI for under two hours; Wiz counted about 49,000 downloads, and the payload went after cloud keys, AI-provider API keys and SSH keys.
Security & misuse · Open weights & ecosystem
Two critical PHP flaws found with AI models are patched as exploit attempts surge
Wiz said every PHP version back to 5.4 was affected; Amazon logged an exploitation attempt four days before disclosure, and 32 UK government services went offline as a precaution.
Security & misuse · Safety & alignment