Source item

Rundown of the very bad week in security: - TeamPCP (sophisticated hacking group) attacks: Hackers broke into the system that builds a oss popular security scanning tool called Trivy. This was a supply chain attack (when bad code is slipped into widely used software tools or libraries, so it spreads automatically to anyone who downloads or uses them). They used the stolen access to poison other tools like LiteLLM (a popular Python gateway library with ~100m million monthly downloads that lets developers easily call many different AI models through one simple interface) and Telnyx (a comms platform, that for example lets devs make phone calls and send texts). The bad code stole passwords and secrets from developers’ computers, which then let them break into Mercor (stealing a lot of sensitive data) and Cisco (stealing source code for their AI products). - Axios npm attack: Someone took over the main contributor’s account for axios (a popular JavaScript library that makes it easy to send and receive data over the internet in browsers/apps). This was another supply chain attack. Hackers released two fake versions that secretly installed evil software on anyone who downloaded them, giving the hackers full remote control of those computers. - Claude leaks: Anthropic accidentally published their AI coding tool with a big hidden file that contained all its internal code, secret instructions, and planned new features. They did not leak the model weights. They did have documents about their next unreleased AI model “mythos” exposed online. These were accidental mistakes, not hacks. - Railway issues: Railway (a cloud platform for devs) made a short mistake in their settings that let random people see other users’ private information for <1 hour. Separately, bad actors used Railway’s platform as a tool to help run phishing attacks against Microsoft accounts. To clarify for non security friends - these are not the result of some “rogue cyber AI.” They are affecting companies in the dev/AI ecosystem. But AI software abundance/pace of development, agentic library selection, and ai-automated builds/ai-managed secrets are surely amplifying classic supply chain issues and human error. Zooming out: