نبض سایبری اخبار امنیت سایبری، با ذکر منبع
SOCRadar

New LiteLLM Supply Chain Attack Hits PyPI and Docker

A new LiteLLM supply chain attack has turned version 1.107.0, an official release of the popular open-source LLM gateway, into a credential stealer. On October 21, 2026, attackers used stolen maintainer tokens to publish trojanized wheels to PyPI and poisoned Docker images, exposing cloud keys, AI provider secrets and LiteLLM proxy databases on any host […]

امنیت هوش مصنوعی امنیت زنجیره تأمین هوش مصنوعی و یادگیری ماشین دواپس و زیرساخت متن‌باز
خواندن متن کامل در SOCRadar درخواست حذف

این صفحه فقط عنوان و خلاصهٔ کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
CSO Online

Attackers compromised 42 GitHub repositories by using files too large to be searched

A security research firm reported Monday that it had identified breaches of 42 third-party GitHub repositories in which attackers had deployed payload blobs large enough “to evade the GitHub search and API paths normally used to find this kind of compromise.” The report from JFrog Security Research said the victimized repositories contained execution hooks for AI coding assistants and IDEs, along with polymorphic wra…

بدافزار و آلودگی آسیب‌پذیری و روز صفر امنیت ابری
منبع
CSO Online

Attackers built a ‘Skynet’ AI agent that hijacks exposed models to run cyberattacks

Skynet is no longer a fictional adversary. Attackers have built an offensive agent that exploits unprotected AI models on the web with a ‘Skynet’ directive that allows them to run unattended for up to 100,000 steps. In this mode, a reference to the humanity-destroying artificial neural network-based superintelligence system in the Terminator film franchise, the agent can kick off tools, scan for and infect targets, d…

بدافزار و آلودگی آسیب‌پذیری و روز صفر بات‌نت و DDoS
منبع
CyberScoop

Before you file that AI bug report, OpenAI has some advice

Open-source maintainers are so overwhelmed by AI-generated security reports that some have stopped accepting them. OpenAI’s Daybreak lead says the fix is higher-quality findings and far more coordination. The post Before you file that AI bug report, OpenAI has some advice appeared first on CyberScoop.

آسیب‌پذیری و روز صفر امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین
منبع
CyberScoop

Before you file that AI bug report, OpenAI has some advice

Open-source maintainers are so overwhelmed by AI-generated security reports that some have stopped accepting them. OpenAI’s Daybreak lead says the fix is higher-quality findings and far more coordination. The post Before you file that AI bug report, OpenAI has some advice appeared first on CyberScoop.

آسیب‌پذیری و روز صفر امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین
منبع