Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organizations
Attackers dumped everything they harvested from LiteLLM builds during a 40-minute window in March. Here is what is inside and what it says about where secrets live.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Scale Your Engineering Organization Without Losing Control
Growing engineering organizations all hit the same wall. More teams shipping software means more repositories, more permission requests, more onboarding cycles, and eventually one platform admin fielding every change. The platform that was supposed to accelerate delivery has now become the bottleneck. JFrog Projects is built to break that pattern.
How does EDR work? Architecture, monitoring, detection and response explained
EDR (endpoint detection and response) works by deploying sensors on protected endpoints to continuously collect selected behavioral telemetry, forwarding that telemetry to a centralized analytics layer, commonly cloud-hosted, that applies detection rules, behavioral analytics, machine learning and threat intelligence, and surfacing prioritized incidents in a console where analysts can investigate and respond.
Data Fiduciary vs Data Processor: The Key Distinctions Under the DPDP Act
Under India's Digital Personal Data Protection (DPDP) Act, 2023, every organization that handles personal data falls into one of two roles: data fiduciary or data processor. A data fiduciary decides why and how personal data is processed. A data processor carries out those instructions on the fiduciary's behalf, with no independent decision-making authority. The distinction matters because the DPDP Act ties accountability, liability, and contractual duty directly to which role you occupy.
AI Security Policy in Practice: How to Define What AI Can and Cannot Do
Most organizations that try to write an AI security policy start with two lists. Approved tools and banned tools. But, that list is inevitably out of date within a month. Employees adopt AI features embedded in everyday software faster than any review board can evaluate them, and a blanket ban does not stop the behavior, instead it pushes people toward personal accounts and unmanaged services.
How to Write a POA&M That FedRAMP Reviewers Accept
FedRAMP moved POA&Ms to agencies and replaced them with Accepted Weaknesses under the 2026 rules. Cloud providers must evaluate vulnerabilities in context (criticality, reachability, exploitability, detectability, prevalence, privilege, proximity, known threats), report results in JSON with PAIN N1–N5 ratings, and assume attacker automation. Remediate high PAIN, internet reachable risks fast; low PAIN risks can be accepted. Machine-readable data and platforms can help meet requirements.
WhatsApp Usernames: Privacy Feature Brings New Impersonation Risks
WhatsApp has begun rolling out usernames, letting people connect without sharing their phone number. The feature adds privacy for individual users but opens fresh territory for impersonation, lookalike accounts, and smishing, particularly as usernames are reserved on a country-by-country basis.
What's new in Tines: July 2026 edition
July was an exciting month in the world of Tines. We launched Tines 3B, the single, secure environment for every team’s apps, agents, and automation. It’s a new platform where everyone can build, while you safely run and monitor your organization’s most important work. The Tines platform you already know is now called Tines Stories, and we’ll continue to invest in, support, and develop it.
How Security Awareness Training Safeguards Operations
In any organisation, your people are your most valuable asset, but they can also be your greatest security vulnerability. Technical safeguards like firewalls and antivirus software are essential, but they can't stop a well-meaning employee from clicking a malicious link or unintentionally exposing sensitive data. This is where security awareness training becomes critical. It's not just about ticking a compliance box; it's about transforming your entire team into a proactive and vigilant line of defence that safeguards your daily operations.
Your Invoice Fraud Controls Probably Never Look at the Signature
Business email compromise took $3 billion in reported losses during 2025, the second-largest category in the FBI's Internet Crime Complaint Center annual report after investment fraud. The same report logged 1,008,597 complaints and $20.877 billion in total losses, up 26% on the year before. The control most organisations built in response is a callback procedure. Payment details changed? Phone the supplier on a number you already had. That control works, and it's worth having.