cybersecurity Archive - Hey-GPT.de - Daily GenAI News Digest

Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords. LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip instal

24. März 2026

GenAI Updates

LiteLLM PyPI Supply Chain Attack: How a Poisoned Package Exposed Developer Credentials

**Software Horror: The LiteLLM PyPI Supply Chain Attack** Every developer has typed it. `pip install…

This video examines the use of Palantir's 'Gotham' surveillance software by German police and military, its legal implications, and future plans. The software, used for analyzing police data, faces controversy due to its opaque functionalities and Palantir's ties to the U.S. government.

2. Januar 2026

GenAI Updates

39C3 – Blackbox Palantir: Surveillance Software in Germany

39C3 - Blackbox Palantir: Surveillance Software in Germany If you care about privacy, and honestly…

This talk explores the hidden risks in apps leveraging modern AI systems, especially those using large language models (LLMs) and retrieval-augmented generation (RAG) workflows. It demonstrates how sensitive data, such as personally identifiable information (PII) and social security numbers, can be extracted through real-world attacks. The presentation highlights that current PII scanning tools fail to recognize the rich data within these systems, posing a significant privacy disaster for AI ecosystems.

20. November 2025

GenAI Updates

Exploiting Shadow Data from AI Models – Patrick Walsh (DEF CON 33)

Exploiting Shadow Data from AI Models (Patrick Walsh, DEF CON 33) I watched Patrick Walsh’s…