Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

LiteLLM compromised again: infostealer and RAT found in version 1.107.0

On October 21, 2026, version 1.107.0 of LiteLLM (a popular open source proxy that lets developers route requests across dozens of LLM providers) was found to be compromised by an attacker who injected malicious code into its published Python wheels on PyPI. The official Docker image for the same version is also compromised.

Rubrik MSP Unscripted - Episode 8, Part One - Featuring Heejae Chae

In this episode of MSP Unscripted, we sit down with Heejae Chae from SysGroup to explore the evolving managed services landscape and what it takes for MSPs to stay competitive in a rapidly changing market. We discuss the growing importance of cyber resilience, the shift from traditional IT services toward outcome-driven managed offerings, and how MSPs can differentiate themselves by delivering meaningful business value to customers.

Rubrik MSP Unscripted - Episode 8, Part Two - Featuring Heejae Chae

In this episode of MSP Unscripted, we sit down with Heejae Chae from SysGroup to explore the evolving managed services landscape and what it takes for MSPs to stay competitive in a rapidly changing market. We discuss the growing importance of cyber resilience, the shift from traditional IT services toward outcome-driven managed offerings, and how MSPs can differentiate themselves by delivering meaningful business value to customers.

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks Counter Threat Unit (CTU) and SophosLabs researchers investigated a cluster of incidents attributed to the BRONZE SANDCASTLE threat group. The most distinctive technical marker for BRONZE SANDCASTLE is its consistent use of Sandboxie DLL sideloading.

RevStealer Malware: A Hidden Data Heist Behind the Promise of Free AI

RevStealer is an infostealer first observed in September 2026 that targets Windows systems, with reported 64-bit execution and JavaScript-based components. It is built to steal authentication credentials and other sensitive user data while emphasizing stealth through anti-debugging, anti-sandbox, anti-VM, and evasion features. Its threat significance comes from a short, theft-focused execution model that pairs broad data collection with concealed command-and-control and exfiltration behavior.

Rubrik MSP Unscripted Episode 7 - Featuring Rajat Shah

In this episode of MSP Unscripted, Nawaz Ali sits down with Rajat Shah, Product Manager at Rubrik, to talk about the launch of multi-tenancy and what it means for managed service providers. Nawaz and Rajat discuss how shared infrastructure can help MSPs improve service economics while maintaining strong tenant isolation, expand opportunities across SMB and mid-market customers, and make services such as Backup as a Service, Disaster Recovery as a Service, isolated recovery environments, and advanced cyber recovery capabilities more scalable.

Report: Ransomware Attacks Involving Data Theft Are Surging

Ransomware attacks involving data theft have surged by 275% in 2026, according to a new report from Zscaler. Attackers exfiltrated more than 896.2 terabytes of data from victim organizations, more than seven times the amount stolen during the 2023–2024 reporting period.

The Video Game Market on Its Way to $300 Billion

According to industry experts, annual revenue in the gaming industry is projected to exceed $300 billion by 2028. This represents more than double the figures recorded in 2019. The key growth drivers remain the expansion of online services and the rapidly growing global player base. However, alongside money and audiences, the industry is also attracting those who seek to profit through illegal means.

Ep. 86 - Flax Typhoon Ran on 1,300 Scripts and a 12-Year-Old Bug Nobody Patched

Ten government agencies across seven countries put their names on one advisory. AA26-281A profiles Integrity Technology Group — a China-based, for-profit contractor that builds, sells and hosts the tooling behind large-scale intrusions, and whose domains the FBI seized on October 8. Tova Dvorin and Adrian Culley break down MicroScan’s 1,300 pentest scripts, the eBurst spray that tries ten interfaces into one Microsoft 365 mailbox, SoftEther VPN hiding behind trusted Windows process names, and a 12-year-old Bash CVE still exploited in the wild.