The TeamPCP supply chain attack compromised LiteLLM packages 1.82.7 and 1.82.8, stealing SSH keys, cloud credentials, API tokens, and more from developer machines, where secrets live, breathe, and often remain unmonitored.

"Litellm is downloaded

San Francisco has always had a talent for turning risk into infrastructure, such as when Charles Fey invented the slot machine there during the Gold Rush. Today, we have another nondeterministic device for fortune seekers willing to pull a lever...

The Trivy story is moving quickly, and the latest re...

Supply chain security has moved closer to the humans with hands on the keyboard.

For years, security teams have treated production systems, CI/CD pipelines, and identity infrastructure as the most sensitive parts of the software lifecycle. That is not wrong, but it is incomplete. The developer workstation belongs in that same conversation because it sits at the intersec...

New York knows how to turn rough ground into something human-friendly. For example, the Liz Christy Garden began in 1973 as the city’s first community garden, carved out of an overgrown vacant lot on the Lower East Side. They went from a wild and chaotic space to...