XFEDI

Remote profile

ActivityPub

Sam Stepanyan :verified: 🐘

https://twitter.com/securestep9
#OWASP London Chapter Leader(@OWASPLondon). Application Security (#AppSec) Architect & Consultant. OWASP Global Board Member. OWASP Nettacker Project co-leader. #CISSP

Open remote profile ↗

Posts

Sam Stepanyan :verified: 🐘@[email protected]

24m

#LiteLLM compromised AGAIN! LiteLLM v1.107.0 on #PyPI carries a remote code execution backdoor and a credential stealer which steals Cloud and AI credentials. #Malware runs at Python startup, no import needed.

#SoftwareSupplyChainSecurity
👇
https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html

The Hacker NewsLiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and BackdoorCompromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.

↩ Reply ♡ 0 · ↻ 0 ↗ Original

Sam Stepanyan :verified: 🐘@[email protected]

Cyber criminals steal children's data after company used 'Password1' #password to protect old account:
👇
https://www.bbc.co.uk/news/articles/c6r7y03e9m3ro

BBC NewsHackers steal children's data after company used 'Password1' for old accountThe data watchdog reprimanded Ogi Networks Limited and Data Cymru after the 2024 ransomware attack.

↩ Reply ♡ 0 · ↻ 0 ↗ Original

Sam Stepanyan :verified: 🐘@[email protected]

#Node.js issued security updates for its 22.x, 24.x, and 26.x versions, fixing high-severity issues in DNS resolution, TLS certificates, Brotli decoding, HTTP agents, and crypto caches:
👇
https://nodejs.org/en/blog/vulnerability/october-2026-security-releases

nodejs.orgNode.js — Wednesday, October 21, 2026 Security ReleasesNode.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

↩ Reply ♡ 0 · ↻ 0 ↗ Original