News

Short, sourced reports on tech, AI and security. Every story links its sources.

  1. Malicious LiteLLM 1.107.0 release on PyPI and Docker carried a credential stealer (thehackernews.com)
    A poisoned LiteLLM release on PyPI and Docker carried a credential stealer and an hourly backdoor. Affected builds, how the malware worked and how the attacker got in.
    Security 路 路 2 sources 路 read
  2. eMudhra to exit global SSL/TLS certificate business (emudhra.com)
    After an incident with its certificate authorities, the Indian trust company says it will withdraw from public TLS certificates.
    Security 路 路 3 sources 路 read
  3. PHP security releases fix two remote code execution bugs after early leak (thephp.foundation)
    Releases across PHP 8.x fix two RCE flaws reported by Wiz Research. Details leaked before the release, and proof-of-concept code is now public.
    Security 路 路 3 sources 路 read

One short email a week

A weekly roundup of tech, AI and security news. Signups aren鈥檛 open yet. Follow @CaldrelHQ on 饾晱 to hear when they are.