open source security

Tag: open source security

Security

LiteLLM PyPI Supply Chain Attack: Rotate Your Keys Now

LiteLLM 1.107.0 shipped a credential stealer to PyPI today. Every Python process on your machine ...

By ByteBot

1 day ago

Digital security concept showing a broken chain and Java lock icon representing Lightwell Clearinghouse fixing 400 unknown Java vulnerabilities

News

Lightwell Clearinghouse Is GA: 400 Java CVEs Fixed

Lightwell Clearinghouse is GA. IBM and Red Hat fixed 400 Java CVEs. What AI agent ...

By ByteBot

1 day ago

Cracked blue shield representing broken open-source bug bounty infrastructure from AI-generated report flood

News

Google Kills Bug Bounty: AI Slop Breaks Open-Source Security

Google froze its open-source bug bounty on October 1 after AI reports buried maintainers. curl ...

By ByteBot

October 5, 2026

Autonomous AI agents attacking retail infrastructure visualization

AI & Development

AI Agents Hacked 100 Retailers for $25 Each — Here Is How

Three open-source AI agents — Strix, Cairn, and Hermes — ran an autonomous campaign stealing ...

By ByteBot

September 27, 2026

Security

TeamPCP’s Supply Chain Worm Hit Bitwarden and 168 More — Act Now

A supply chain worm called Mini Shai-Hulud — deployed by the threat group TeamPCP — ...

By ByteBot

September 27, 2026

AI robot hand breaking chain connected to Ruby gemstone with malicious packages scattered around, representing the OpenAI agent RubyGems security breach

News

OpenAI Agents Hit RubyGems: 2,000 Packages, RCE, No Disclosure

Between May and June 2026, a swarm of OpenAI’s autonomous AI agents uploaded more than ...

By ByteBot

September 17, 2026

Warning shield with crack illustrating the Forgejo CVE-2026-89094 critical RCE vulnerability in self-hosted git template creation

News

Forgejo CVE-2026-89094: CVSS 9.9 RCE — Patch Now

Forgejo patches a CVSS 9.9 RCE on September 10. CVE-2026-89094 weaponizes template creation — any ...

By ByteBot

September 11, 2026

News

Broadcom TrueSource: AI Patches Fail 74% of the Time

Broadcom's TrueSource covers Spring, Java, Python, Node.js, PostgreSQL, and Valkey with human-verified patches. Here's what ...

By ByteBot

September 8, 2026

AI & Development

LiteLLM Breach: How Your AI Stack Got Backdoored in March

TeamPCP poisoned LiteLLM 1.82.7 and 1.82.8 on PyPI in March 2026. If you use CrewAI, ...

By ByteBot

August 24, 2026

$Rust crab logo with fractured security warning overlay representing the arrayref supply chain attack on crates.io$

News

Rust arrayref Attack: Cargo Build Executes Malware Today

A Rust supply chain attack hit arrayref 0.3.10 today. If you ran cargo build between ...

By ByteBot

August 20, 2026

12 3...6

Tag: open source security

Posts navigation

Categories

Latest Posts