{"slug": "litellm-supply-chain-attack-started-with-an-exposed-master-key", "title": "LiteLLM supply chain attack started with an exposed master key", "summary": "The LiteLLM supply chain attack began with an exposed master key, according to The Register's Infosec coverage. The report ties the compromise of the AI gateway tool to a leaked credential, placing it among a wave of security incidents that also included zero-day attacks on on-prem SharePoint and Signal-themed phishing by attackers posing as support staff.", "body_md": "### [AI](https://beta.theregister.com/tag/ai)\n\n- \n#### UK ministers had plenty of time for AI datacenter bosses, but none for environmental groupsInvestigation finds businesses dominated govt meetings while communities were left out of decisions about AI Growth Zones\n- \n#### Humanity can't afford not to spend $800B on AI, Anthropic insistsIt's more important than chips, 'leccy and the net, after all\n- \n#### OpenAI rolls out budget-priced mid-tier GPT-6.1 TerraNot a bombshell, but it rivals pricier models on some tasks at a tenth of Astra's API price\n- \n#### Reddit's r/opensource bans AI slop, and quite a few humans for good measureNew rules also shut out solo developers, fledgling projects, and anyone who doesn't speak English\n- \n#### Private equity giant: AI payoff strictly limited to Big TechThe Magnificent Seven are galloping off with the profits, while the rest of the S&P 500 see no benefit, claims Apollo\n\n### [Infosec](https://beta.theregister.com/security)\n\n- \nSecurity #### Russians are posing as Signal support to launch phishing attacksPLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!\n- \nSecurity #### Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attackPLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more\n- \nBlack Hat and DEF CON #### DEF CON Franklin project enlists hackers to harden critical infrastructureVoting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included\n- \nSecurity #### EQT buys majority share in Swiss cybersecurity biz AcronisWent at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified\n- \nMalware Month #### Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sightOn the plus side, infosec's a good bet for a long, stable career\n\n### [FOSS](https://beta.theregister.com/tag/FOSS)\n\n- \n#### FreeBSD founder ports Omarchy to FreeBSD in ten days, ten releasesDaemonarchy in unaffiliated with the Linux original, built with AI help, and could complicate FreeBSD's debate over AI contributions\n- \n#### SparkyOS: Lightweight general-purpose Arch, on a pendriveInteresting new project from the minds behind SparkyLinux\n- \n#### Red Hat helps teach about tech writingBut learns tough lessons about AI in the process\n- \n#### NetBSD may have found a new role: The AI-free FOSS OSIncreasing awareness and adoption, followed by increasing donations\n- \n#### OpenAI dots inspire open source imitators amid technical difficultiesPersistent agents appeal to AI companies, but demand isn't obvious\n- \n#### Ubuntu 'Stonking Stingray' beta swims out: Deeper Rust 'oxidization' plus LLM speech-to-textGNOME 51 is here, and Ubuntu interim releases are getting interesting again", "url": "https://wpnews.pro/news/litellm-supply-chain-attack-started-with-an-exposed-master-key", "canonical_source": "https://www.theregister.com/security/2026/10/26/litellm-supply-chain-attack-started-with-an-exposed-master-key/5305544", "published_at": "2026-10-26 20:30:53+00:00", "updated_at": "2026-10-27 11:14:28.440322+00:00", "lang": "en", "topics": ["ai-safety", "ai-infrastructure", "ai-tools"], "entities": ["LiteLLM", "The Register"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/litellm-supply-chain-attack-started-with-an-exposed-master-key", "markdown": "https://wpnews.pro/news/litellm-supply-chain-attack-started-with-an-exposed-master-key.md", "text": "https://wpnews.pro/news/litellm-supply-chain-attack-started-with-an-exposed-master-key.txt", "jsonld": "https://wpnews.pro/news/litellm-supply-chain-attack-started-with-an-exposed-master-key.jsonld"}}