Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Compromised LiteLLM 1.107.0 on PyPI Ships a Credential Stealer and Code Loader

On October 21, 2026, a malicious release of litellm, the Python library and proxy for calling LLM provider APIs, was published to PyPI as version 1.107.0. All seven compiled wheels carried three extra files that install straight into the root of site-packages: a.pth hook that runs a credential stealer every time Python starts, and a sitecustomize.py that starts a background loader built to fetch and run remote Python code every hour. The package has had more than 92 million downloads over the past month.

Why AI Needs a Data Control Plane (Masking and Gateways Aren't Enough)

Your AI gateway and identity platform don’t decide whether a task can use a piece of enterprise data. In agentic AI, one request can trigger multiple agents, MCP servers, APIs, RAG systems, and LLMs, and each one is a separate security decision. This video explains why enterprise AI needs a runtime data control plane. It covers why identity alone can’t make the call, why masking PII isn’t enough when business context is sensitive, and how Protecto applies allow, mask, anonymize, rewrite, or selective reveal decisions across the AI workflow. It ends with a Fortune 100 multi-agent example.

AI Data Centers: Environmental Disaster or Groundbreaking Innovation?

Insights from Attempted Intelligence, Episode 2, hosted by Matt Duren, SVP of AI and data, KnowBe4 and Harlan Parrott, VP of AI innovation, KnowBe4. AI data centers are one of the most debated topics in the world right now. Some people worry about the energy and water it takes to run them. Others see the foundation for the next wave of AI advances. Both camps have a point. On episode two of the Attempted Intelligence podcast, Matt and Harlan each picked a side and debated it.

Web App Owners - You're on Notice. Your Low-Hanging Fruit Just Got Lower

Recent incident response investigations reveal how AI-assisted attackers are chaining web application vulnerabilities, credential theft, privilege escalation, and lateral movement into autonomous intrusion workflows. This article is part of an ongoing series from Sophos frontline security operations specialists, sharing the expertise they use to strengthen our industry-leading Managed Detection and Response (MDR) service and defend customers against evolving AI-era threats.

Bitsight AI Mode: AI-Powered Cyber Risk Intelligence & Agentic Workflows

Meet Bitsight AI Mode, a new way to investigate cyber risk, prioritize critical exposures, and accelerate security decisions using AI-powered intelligence and agentic workflows. Built directly into the Bitsight platform, AI Mode combines conversational AI with automated, multi-step analysis to help security and risk teams turn complex cyber risk data into actionable insights. With Bitsight AI Mode, you can.

The Best AI Governance Platforms for Financial Services in 2026

Most governance platform comparisons written for financial services lead with the EU AI Act high-risk regime. For a bank deploying credit scoring today, that is the obligation furthest from biting, and the ones already in force get less attention than they deserve. ‍ The criteria below follow the provisions rather than the subject areas, with dates attached, because the sequence they arrive in decides what a platform has to do first. ‍

What Changed Before the Alert? | Reach Security x ECI

Garrett Hamilton, co-founder and CEO of Reach Security, joined Jonathan Brucato, Vice President of Cyber Defense at ECI. In this clip, Garrett walks through Reach Everywhere with a ransomware detection as the example: what the controls on that host look like, and what changed in the weeks before. In the full episode.

Your Employees Have Something to Confess About AI

Your employees have a lot to confess about how they’re using AI. The question is whether you’ll hear it from them. Shadow AI is already part of how most teams work. Sensitive data goes into AI tools every day, and most leaders have no visibility into it. Teramind gives you full visibility into how employees use AI, so you can set clear rules, protect sensitive data and enable safe AI adoption across your organization.