On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

Google has fixed the issues, which exploited a trust boundary between two AI agents with different privileges to potentially ...

The March 2026 LiteLLM supply chain attack likely affected over 2,500 organizations and exposed over 430,000 CI/CD pipelines.

Terabytes worth of credentials, many belonging to the world’s biggest and most sensitive organizations, have been exposed in a supply-chain attack on LiteLLM, an open source tool that streamlines ...

LiteLLM supply chain attack exposed 2,500+ companies and 434,000 CI/CD pipelines in 40 minutes. FBI warns threat still live.

Malicious LiteLLM PyPI releases stole cloud and SSH keys, Kubernetes tokens, and other secrets, potentially exposing 2,500+ ...

AI agent flaws in AWS, Google, and Vercel let forged tool calls reach tools without model authorization, while several paths ...

AI agent tool bypass vulnerability CoreBreak exposed production agent infrastructure at AWS, Google, and Vercel, where attackers could invoke tools without any model turn. AWS fixed its managed ...

Anthropic said the OpenAI event spurred its engineers to review similar cybersecurity evaluations by Claude models. The audit ...

GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to protect against supply-chain attacks and to limit their impact.

CISA warns that three vulnerabilities in IBM Langflow OSS, N-able N-central, and Apache Tomcat have been exploited in the ...

A roundup of the latest noteworthy AI-assisted attacks, threats, risks, and vulnerabilities, and what they portend for cyber defense.