Tag
5 articles tagged Security Operations.
AI Security
Storm-0940 did not need a single user password: it signed in as a trusted vendor application. Here is what happened, what to check in your tenant, and how to shrink the access third-party apps hold.
AI Security
The LiteLLM 1.107.0 release on PyPI and its Docker images carried a credential stealer that runs on every Python start. Here is what it did, how to tell if you were hit, and what to rotate.
Security Operations
Two critical PHP engine flaws allow unauthenticated remote code execution on ordinary PHP sites, regardless of application code. Here is what to patch, what to do if you cannot, and what to watch for.
AI Security
An LLM endpoint turns every request into a bill. Here is how to cap what a single user, an agent loop, or a stolen API key can spend before it becomes an incident.
Privacy
LLM applications need detailed logs to debug and investigate incidents, but prompts are full of personal data. Splitting logs by purpose and redacting at the edge resolves most of the tension.
