Identity
TeamPCP, the threat actor behind the recent Trivy and KICS breaches, compromised a popular Python package named litellm and pushed two malicious versions containing a credential harvester, a Kubernetes lateral movement toolkit, and a persistent backdoor. Multiple security…
Cybersecurity researchers have detailed a security flaw that leverages indirect prompted injection targeting Google Gemini…
Ravie LakshmananJan 19, 2026Hacking News / Cybersecurity In cybersecurity, the line between a normal update…
Just a few years ago, the cloud was touted as the “magic pill” for any…
Ravi LakshmananJanuary 19, 2026Hardware security/vulnerabilities A team of academics from Germany’s CISPA Helmholtz Center for…
Cybersecurity researchers have revealed details of an ongoing campaign called KongTuke that uses a malicious…
Ravi LakshmananJanuary 19, 2026Malware/Threat Intelligence Cybersecurity researchers have revealed a cross-site scripting (XSS) vulnerability in…
