Railway says some developers had newly replaced API keys revoked because those keys were accidentally included in a precautionary list sent to AI providers. Its October 24 clarification separates an alarming symptom from its cause: another invalid key did... See more
A secret removed from a public commit in May was still valid in October—and LiteLLM says it became the first step toward a poisoned software release. Its October 23 investigation traces the compromise of LiteLLM 1.107.0 through an unrevoked platform key a... See more
A lock icon on a drive in Windows 11 usually indicates BitLocker or Device Encryption, not a virus. Windows Home can use Device Encryption on supported PCs, so a padlock does not mean someone secretly installed an encryption program. First check whether t... See more
BlackX reached Windows machines that had their security updates installed. The missing step was deeper in the boot chain: the systems still trusted older, vulnerable boot components. Kaspersky's October 22 investigation describes how attackers used that g... See more
A Windows information stealer has a shopping list for the applications people use to work with AI. Check Point Research's October 23 analysis of Aokigahara identifies a dedicated aisessions module that collects local authentication files, session data and... See more
