jawad
Japanese virtual desktop cloud hacked so hard it asks to be banned
Japanese ISP GMO Internet has warned customers the cloudy desktop service it offers as an ideal foreign exchange trading environment was compromised by an attacker, and that it had been…
Worm armed 42 GitHub repos by hiding a payload too big to fail
A new Miasma-family npm worm, originally believed to be just a test with no victims, secretly armed 42 real GitHub repositories from 11 owners, hijacking accounts as early as July…
Alibaba’s Qwen AI caught trying to contact server in China
Open-weight models from China have become very popular, but they’ve also raised some security suspicions. Cohere, a Canada-based biz that offers AI models to enterprises, says that when it was…
LiteLLM supply chain attack started with an exposed master key
LiteLLM has traced last week’s supply chain attack to a master key it accidentally committed to a public GitHub repository in May. The cloud and AI model secret-stealing part of…