Risky Business #830 -- LiteLLM and security scanner supply chains compromised
MentionsAnthropicAppleGitHubNVIDIAiOS
Runs 1:03:53. Streams from dts.podtrac.com only when you press play.
On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They talk through: TeamPCP’s supply chain attack on Github, and they threw in an anti-Iran wiper, because why not?! Anthropic hooks up its models to just… use your whole computer After Stryker’s Very Bad Day, CISA says maybe add some more controls around your Intune? Another iOS exploit kit shows up in the cyber bargain-bin The FTC decides to ban… all new home routers?! U wot m8?! Supermicro founder was personally sanction-busting Nvidia GPUs into China?!
Show notes from Risky Business.
Explained
The technology and terms in this story. Learn more
- AttackSupply-chain attackCompromising a vendor, library or update so the attack reaches all of its customers at once.
- ConceptCISA · Cybersecurity and Infrastructure Security AgencyThe US government's cybersecurity agency, which issues alerts and runs the KEV catalog.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.