最近相次いで人気ライブラリがサプライチェーン攻撃の被害を受けている。3月24日には、人気のPythonパッケージ「LiteLLM」も被害を受けた。LiteLLMは、ChatGPTやGemini、Claudeなど人気のAPIを手軽に切り替えて使えるとい ...
OpenAI revoked its macOS signing certificate after a malicious Axios dependency incident on March 31, 2026, preventing ...
An attacker purchased 30+ WordPress plugins on Flippa, planted backdoors that lay dormant for eight months, then activated ...
The 2024 XZ incident illustrates how open-source software (OSS) has become strategic infrastructure in the global economy, ...
When Nandakishore Leburu was building LLM applications at LinkedIn, he learned that the models weren't the problem. The ...
FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...
Spread the loveIn a troubling escalation of cyber threats, the past 48 hours have witnessed a significant surge in attacks targeting both software supply chains and individuals. Security researchers ...
一部の結果でアクセス不可の可能性があるため、非表示になっています。
アクセス不可の結果を表示する