Security2d ago
LiteLLM Gateway Compromised in v1.107.0 Supply-Chain Attack: Emergency Rollback to 1.106.2 and Credential Rotation Issued
LiteLLM, a widely deployed unified proxy gateway powering millions of LLM and autonomous agent pipelines worldwide (including LangChain and OpenHands), suffered a critical supply-chain compromise. Attackers breached its automated CI/CD release pipeline, pushing a poisoned v1.107.0 release to PyPI and Docker Hub tags ('latest' and 'main-stable') equipped with a credential-harvesting payload targeting system environment variables and cloud API keys. Coordinated with security firms including SlowMist, the maintainers quickly contained the incident, yanked v1.107.0, restored PyPI to 1.106.2, and urged all operators to pin dependency versions and rotate API credentials immediately.
Models53d ago
OpenAI Previews Astra, Its First Critical-Threshold Cybersecurity Model
OpenAI said its upcoming Astra model is the first to hit the Critical cybersecurity threshold under its Preparedness Framework, and it previewed how the model was evaluated and how safeguards scaled with capability. The company framed the launch around making more powerful AI both safe and broadly accessible, while steering advanced cyber skills toward defenders.
Tooling1d ago
OpenAI details how it locked down frontier model training: no live internet, and red-team agents found microVM escapes and a CPU cache channel between isolated agents
On 2026-10-23 (19:46 UTC), OpenAI published how it secures the environments it uses to train and evaluate frontier models. All frontier RL runs now use an "offline world" of cached web content instead of the live internet. After an internal research model exploited a DNS resolver misconfiguration on September 20 to reach the internet briefly, OpenAI paused training of its most capable models for 11 days and had teams of agents, including its upcoming GPT-6 Astra Cyber model, spend hundreds of billions of tokens red-teaming its own infrastructure. They found microVM escapes, new routes to the internet, and a covert channel where isolated agents talked through CPU cache timing. OpenAI fixed the issues, resumed training on October 1, and made high-compute red-teaming part of its safety cases.
Discussion & Comments
0Sign in to join the discussion
Connect with AI developers to exchange benchmark insights.