Category · 3 posts
Vulnerabilities, supply-chain attacks and how to keep your apps and AI systems safe.
What Meta Muse can access, how its Secure VM and approvals protect you, the real risks (training on your data, mistakes, prompt injection), and 10 practical settings and habits to use Meta's AI agent safely.
A malicious LiteLLM 1.107.0 was published to PyPI and Docker on October 21, 2026 and stole credentials from every machine that installed it. How the attack worked, how to check if you're affected, what to rotate, and the habits that stop the next one.
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) lets attackers take over PHP servers with no login. What it is, which PHP versions are fixed, how to check your server, WordPress and shared hosting, Docker images, and what to do if you can't update yet.
Your privacy, your choice
We use storage that’s necessary for the site to work and, with your permission, cookieless analytics to see which posts are read. No ads, no tracking across sites. Read our Privacy Policy and Terms.