Security
5 stories, newest first.
- Railway says 1.85% of its workspaces were hit. That's about 100,000, and the attacker was after AI keys.
The hosting platform's preliminary report puts a number on its October 21 breach and says the attacker went looking for keys to AI services. What it does and doesn't say yet.
- LiteLLM's 1.107.0 release was live on PyPI for under two hours. It was built to steal your AI tool tokens.
A poisoned release of the popular LLM gateway went out through LiteLLM's own pipeline on October 21. The malicious code isn't in the source on GitHub, which is why reading the repo wouldn't have caught it.
- PHP shipped emergency fixes for two unauthenticated remote code execution bugs
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that can let an outside request run code on a web server. Update now, and check your vendor if you use a distro package.
- One hacker's AI agents broke into 100+ company sites at about $50 a break-in. The $50 comes with an asterisk.
NorForge watched a Chinese-speaking attacker aim AI agents at 1,200 online stores. Reuters named Deere, SharkNinja and Cummins among the victims. The cost figure is a rough estimate, and the researcher says so.
- Google stopped paying for bugs in its open source code. Too many of the reports were AI-written and wrong.
On October 1 Google stopped accepting product vulnerability reports to its open source bounty program. Its own explanation is one sentence long, and it doesn't flatter anyone with an API key.