An attacker compromised LiteLLM’s release pipeline and published malware-infected version 1.107.0 through official distribution channels. Users should rebuild affected environments and rotate secrets.
The U.S. Department of Justice and FBI, acting under court authorization, seized seven domains used by the Microscan and FishHub tools. According to officials, they were used to scan for vulnerabilities, conduct spear-phishing and gain subsequent access to networks.
The U.S. Department of the Treasury added eight people and two Mexican companies linked to attacks on ATMs to its sanctions list. Separately, it designated an alleged Tren de Aragua group official.
According to customer notifications, Revolut complied with a fake request posing as a government demand. Potentially disclosed data includes identity documents, IBAN details and transaction history, including Bitcoin activity.
Proofpoint researchers observed the BlueMoon exploit kit in targeted phishing campaigns. The chain exploits Chrome/V8 flaws and Windows privilege escalation; patches are available.
CISA, NSA and the FBI say six Chinese companies obtained outputs from US AI models on a large scale. Beijing rejects the allegations as unfounded.
Slug: Driver’s license scans were offered by the Nexus service on the dark web through a searchable database and a service for purchasing identification documents. Investigative journalist Brian Krebs documented on September 1 that the service claimed to hold more…