LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Swati KhandelwalOct 22, 2026Vulnerability / Web Security Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x...
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
Swati KhandelwalOct 22, 2026Vulnerability / Web Security A remote attacker who has not logged in can crash many HTTP/3 web...
Chrome Adds Suspicious Site Warnings and ClickFix Protection
Chrome is introducing two new security features designed to catch online scams before users fall for them: a lower-severity warning...
EU Website Outages Follow Critical PHP Flaws: What IT Teams Should Know
Two critical vulnerabilities in PHP have prompted government agencies across Europe to temporarily shut down websites, as administrators rush to...
Preventing intelligence politicisation means more than just avoiding partisanship
Upholding the apolitical nature of Australian intelligence is critical to the agencies’ ability to deliver in the national interest, especially...
Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine
Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine Pierluigi Paganini October 21, 2026 A...
OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight
OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight Pierluigi Paganini October 21, 2026 OpenAI reveals two cases...
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the...
Northern Australia: so much economic wealth alongside so much disadvantage
The Australian’s reporting on the suffering of Indigenous children in Port Hedland should sicken everyone in this country. Three children...
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They're now being “broadly exploited” across...
Nuix launches agentic AI capability in Nuix Neo with audit trail
Nuix has launched the Nuix Neo AI Agent, a new capability aimed at helping investigators, legal teams, auditors, regulators and...
When thinking about national security, think about local businesses
The next national security crisis may expose a vulnerability that rarely appears in Australia’s strategic assessments: the disappearance of the...
EDPB Adopts Guidelines on the Interplay Between the DSA and the GDPR
On September 17, 2026, the European Data Protection Board (“EDPB”) adopted Guidelines 3/2025 on the interplay between the Digital Services...
Smashing Security podcast #489: How a brand new crypto wallet came with a spy inside
Imagine buying a brand new hardware wallet for your cryptocurrency with the shrink-wrap still on… what could possibly be hiding...
