Signed, Protected and Still Poisoned: How Attackers Slipped a Credential Stealer Into the LiteLLM AI Gateway’s Official Release
LiteLLM is the kind of software most business owners have never heard of but may already depend on. It gives...
L7 News
Chrome Will Now Speak Up Before You Paste That ‘Fix’: A Walkthrough of Google’s New Defenses Against ClickFix and Web Scams
ClickFix attacks succeed because the victim does the risky part. A fake CAPTCHA or error page tells them to copy...
1,462 Arrests, 10,909 Networks Taken Down, $105 Million Recovered: Interpol’s Serengeti III Crackdown, at a Glance
Online fraud rarely respects borders: the scam that reaches a business inbox may be planned, staffed and laundered thousands of...
PHP2Shell, Day Two: The Fix Is Out, Attackers Were Probing Days Earlier, and What to Do Depending on Where Your Site Lives
Yesterday’s question was when the fix would arrive. Today’s is whether it reached your servers in time. PHP released the...
A Fake Microsoft Lock Screen, a Phone Call and a Remote Desktop Download: Inside a Long-Running Tech Support Scam, and the Layers That Stop It
Here Is How Layered Defenses Help When the Scam Comes With a Phone NumberFake “your computer is infected” pop-ups can...
Eleven Months From Intrusion to Letters: The California Medicaid Billing Breach Touching 970,000 People, by the Numbers
When a state agency hands data to a contractor, the people in that data rarely know the contractor exists. More...
From VPN Gateway to Hypervisor: How Ransomware Crews Are Turning a Months-Old Palo Alto Flaw Into Domain-Wide Access
Patched is not the same as safe if the patch never got installed. Palo Alto Networks’ Unit 42 team said...
The Private Key Was the Number 4: How Eight Weak Certificate Authority Keys Set Off an Internet-Wide Scramble
The padlock in a browser address bar rests on a simple promise: only the certificate authority holds the private keys...
At Least 600 Victims and No Affiliates: A Profile of SafePay, the Ransomware Crew Now Flagged by the FBI and CISA
Federal agencies do not issue a dedicated ransomware advisory for every gang. When the FBI, CISA, the U.S. Secret Service...
PHP Ships an Emergency Fix This Morning for Two Leaked Critical Flaws: Your Questions on PHP2Shell, Answered
Somewhere in almost every small business’s online footprint there is PHP: the company website, a customer portal, a hosting control...
