Posts Tagged ‘CI/CD security’
LiteLLM Supply Chain Attack: A Key Never Revoked
The LiteLLM supply chain attack of October 21 did not start on October 21. According to LiteLLM’s own root cause report, a master key committed to a public repository on May 27 was never revoked. An attacker used it on October 10 to reach the GitHub account of an organization owner, and eleven days later…
Read MoreTop 5 Cybersecurity News Stories July 31, 2026
The five stories in this week’s Cybersecurity News Stories July 31, 2026 each describe a different failure at the same architectural level: not the application layer, not the endpoint estate, not even the network perimeter as conventionally modelled — but the foundational infrastructure that the perimeter, the applications, and the endpoints depend on in order…
Read MoreThe New Era of Software Supply Chain Risk
Modern businesses are now software businesses, and software supply chain risk is now a business risk, not just a developer problem. Whether you manufacture industrial components, process financial transactions, run logistics networks, or operate online storefronts, your business likely depends on ERP systems, customer portals, payment integrations, cloud workloads, APIs, automation scripts, and other layers…
Read More