LiteLLM 1.107.0 was poisoned: rotate every secret it could reach
A hijacked LiteLLM release pipeline pushed a credential stealer to PyPI and Docker for about two hours on 21 October. Rebuild on 1.106.2 and rotate secrets.
Supply chain
ConnectWise Cloud Backup: Storm-0940 and an AI-paced supply-chain attack
Microsoft links the ConnectWise Cloud Backup compromise to Storm-0940 and the ARTEX framework. Export your Entra logs before retention eats the evidence.
