Cyber security
6 items · 6 articles in this topic
Supply-chain and edge-of-stack issues dominate. A leaked key compromised a popular AI library's releases, while the Secure Boot, Brotli and PHP stories gained detail but no clear fixes. Autonomous attack tooling continues to draw research attention.
- 1
LiteLLM: a master key leaked to a public GitHub repo let attackers push a malicious release of its Python package. The headline also cites stolen GitHub tokens and a hijacked release pipeline.
- 2
Autonomous attack agent in 'Skynet mode' hijacks other AI models to run up to 100,000 steps without approval, according to researchers.
- 3
BlackX UEFI bootkit, used in a 2026 espionage campaign, exploits the Baton Drop flaw to bypass Secure Boot and targets Kaspersky and Avast.
- 4
Brotli flaw CVE-2026-111497 ('node2shell') is reported exploitable through Python and other Brotli consumers. Aikido's write-up is the source; the summary lists no fixed versions.
- 5
PHP: TechCrunch describes two critical web bugs that prompted a major urgent patching scare. The summary gives no CVE ids or fix versions.
- 6
Argus, a new MIT-licensed open-source agentic security operations platform, was announced by Thomas Unise. The summary gives no capability detail.