🚨 The AI gateway library LiteLLM was hijacked again in a supply chain attack.
It hid malware that runs whenever Python starts and steals SSH keys, cloud secrets and Claude Code configs.
It also raids LiteLLM's own database for every AI provider key stored.
https://www.aikido.dev/blog/litellm-compromised-infostealer-rat
It hid malware that runs whenever Python starts and steals SSH keys, cloud secrets and Claude Code configs.
It also raids LiteLLM's own database for every AI provider key stored.
https://www.aikido.dev/blog/litellm-compromised-infostealer-rat
💩22🤪2😁1
‼️ BREAKING: Trend Micro posted several unpatched Linux kernel flaws to public mailing lists.
Two are critical remote code execution bugs in the kernel's SMB server, and one includes proof-of-concept code.
Linux maintainer Greg told them to "fix your submission process."
https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
Two are critical remote code execution bugs in the kernel's SMB server, and one includes proof-of-concept code.
Linux maintainer Greg told them to "fix your submission process."
https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
🥴21🤣4😭2🤪2❤1😁1
❗️ A Hacker News user apologised for posting the PHP2Shell CVE IDs two days early, saying his contact told him there was no embargo.
PHP moved its patch up a day as the IDs spread.
Amazon says attackers were already trying the exploit on 17 October, three days before his post.
https://news.ycombinator.com/item?id=50193416
PHP moved its patch up a day as the IDs spread.
Amazon says attackers were already trying the exploit on 17 October, three days before his post.
https://news.ycombinator.com/item?id=50193416
🥴21😱4❤2😁2💩1
❗️ EU governments backed a GDPR change on Wednesday that would let AI companies use Europeans' personal data without consent.
Privacy group noyb says OpenAI, Google and Meta could tap decades of collected data with almost no limits.
The European Parliament still has to agree.
https://noyb.eu/en/ai-eu-member-states-approve-digital-expropriation-europeans-ai-companies
Privacy group noyb says OpenAI, Google and Meta could tap decades of collected data with almost no limits.
The European Parliament still has to agree.
https://noyb.eu/en/ai-eu-member-states-approve-digital-expropriation-europeans-ai-companies
🤬34💩5🤣4
❗️ EU governments backed a GDPR change on Wednesday that would let AI companies use Europeans' personal data without consent.
Privacy group noyb says OpenAI, Google and Meta could tap decades of collected data with almost no limits.
The European Parliament still has to agree.
https://noyb.eu/en/ai-eu-member-states-approve-digital-expropriation-europeans-ai-companies
Privacy group noyb says OpenAI, Google and Meta could tap decades of collected data with almost no limits.
The European Parliament still has to agree.
https://noyb.eu/en/ai-eu-member-states-approve-digital-expropriation-europeans-ai-companies
🤬34💩7😱4🎉2🤔1
‼️ China's Moonshot says it nerfed Kimi K3.1 Pro by stripping cyber training data from the open-weights version to curb misuse.
Its solve rate on Moonshot's cyber benchmark went from 90.5% to 81%.
Artificial Analysis ranks it China's strongest model and 4th in the world.
Its solve rate on Moonshot's cyber benchmark went from 90.5% to 81%.
Artificial Analysis ranks it China's strongest model and 4th in the world.
😢26🔥6😁2🤔1
‼️ Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws.
In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.
https://tailworm.com/
In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.
https://tailworm.com/
😁20🤔5😭3😱2❤1🥰1
❗️ A developer hid a Bitcoin key on a PHP server left unpatched against PHP2Shell, the critical flaws fixed on Oct 21, and dared anyone to steal it.
17 hours on, the wallet holds ~$2,000 and nobody has taken it.
The developer says someone is crashing PHP but "still no RCE yet".
https://news.ycombinator.com/item?id=50224916
17 hours on, the wallet holds ~$2,000 and nobody has taken it.
The developer says someone is crashing PHP but "still no RCE yet".
https://news.ycombinator.com/item?id=50224916
🤣25🤪4❤1😁1🤔1
❗️ eToro published its reply to Apple's App Store reviewers as the release notes for its iPhone trading app.
It tells Apple a background audio setting they flagged "was included by mistake and is not tied to any functionality in the app."
The reply is still on the App Store. https://t.co/Hcc0BrIMnl
https://x.com/IntCyberDigest/status/2114484398536204752
It tells Apple a background audio setting they flagged "was included by mistake and is not tied to any functionality in the app."
The reply is still on the App Store. https://t.co/Hcc0BrIMnl
https://x.com/IntCyberDigest/status/2114484398536204752
🤣12
❗️ A tourist lost their Apple Watch charger in China, bought another at an Apple Store, and the US watch refused it as a "country-specific charger".
Apple says Chinese wireless chargers sold there only charge local models.
They cost CN¥279, ~$42, and can't fast charge.
Source: https://support.apple.com/en-us/120920
And: https://www.reddit.com/r/AppleWatch/comments/1xf0vyx/annoying_official_chinese_charger_doesnt_charge/
https://x.com/IntCyberDigest/status/2114498741805645872
Apple says Chinese wireless chargers sold there only charge local models.
They cost CN¥279, ~$42, and can't fast charge.
Source: https://support.apple.com/en-us/120920
And: https://www.reddit.com/r/AppleWatch/comments/1xf0vyx/annoying_official_chinese_charger_doesnt_charge/
https://x.com/IntCyberDigest/status/2114498741805645872
🤣35💩5🤔2❤1🤯1😭1
❗️ A Nissan Rogue owner says OpenAI's GPT-6 Astra turned his Lenovo laptop into a fake phone that his car's Bosch head unit accepted for Android Auto.
They are now probing its bootloader in a bid to flash Android 13 onto the factory unit.
He puts the odds of bricking it at 65%. https://t.co/SjMxNbAeuq
Source:
r/CarHacking
u/Elegant_Cantaloupe_8
https://x.com/IntCyberDigest/status/2114528940782149823
They are now probing its bootloader in a bid to flash Android 13 onto the factory unit.
He puts the odds of bricking it at 65%. https://t.co/SjMxNbAeuq
Source:
r/CarHacking
u/Elegant_Cantaloupe_8
https://x.com/IntCyberDigest/status/2114528940782149823
👍10🤔5🥴2😁1
❗️ Framework cut the RAM on some Laptop 13 Pro pre-orders after its memory supplier more than doubled prices. Later 64GB orders were downgraded to 32GB, some 32GB orders to 16GB.
One buyer says they paid $800 to get back the RAM they ordered, then got a laptop that won't boot.
They say a bent pin on the memory interposer leaves it reporting no RAM, and the replacement part support promised still hasn't shipped 11 days later.
Support told them Framework is changing warehouses.
Source: https://www.reddit.com/r/LinusTechTips/comments/1xerx0x/man_this_feels_bad_and_i_hope_i_am_the_only/
https://x.com/IntCyberDigest/status/2114546053877727404
One buyer says they paid $800 to get back the RAM they ordered, then got a laptop that won't boot.
They say a bent pin on the memory interposer leaves it reporting no RAM, and the replacement part support promised still hasn't shipped 11 days later.
Support told them Framework is changing warehouses.
Source: https://www.reddit.com/r/LinusTechTips/comments/1xerx0x/man_this_feels_bad_and_i_hope_i_am_the_only/
https://x.com/IntCyberDigest/status/2114546053877727404
😢13💩5😭2🤪2