> TritonInfoSec News
Home / Aug 14, 2026 / Story
0
#5 SecurityWeek general August 12, 2026 at 09:55 UTC

Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack

By Ionut Arghire

AI Summary

A supply chain attack on LiteLLM — carried out via a compromise of the Trivy security scanning tool — resulted in information-stealing malware being distributed to over 2,500 organizations using the popular AI gateway library. Terabytes of credentials were reportedly scraped and exfiltrated from affected users. Security teams using LiteLLM or Trivy in CI/CD pipelines should audit dependencies and rotate any credentials that may have been exposed.

Read full article → https://www.securityweek.com/over-2500-organizatio…

Relevance score: 87.0/100

# More from August 14

  1. 1
    Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor The Hacker News
  2. 2
    Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’ SecurityWeek
  3. 3
    Attackers Exploit SharePoint Authentication Bypass After Public PoC Release The Hacker News
  4. 4
    Critical VMware vCenter RCE flaw exploited for reverse SSH access BleepingComputer
  5. 6
    White House taps security firms for offensive hack-back operations BleepingComputer
  6. 7
    OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning The Hacker News
  7. 8
    New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges BleepingComputer
  8. 9
    Hundreds of fake Chrome VPN extensions route traffic through a proxy BleepingComputer
  9. 10
    Android malware combo takes out loans and relays victims' credit cards BleepingComputer