4404 Founders13h ago · 2 min readLiteLLM 1.107.0 Credential Harvesting AttackA key accidentally exposed in May enabled attackers to inject a malicious LiteLLM package (v1.107.0) that harvests credentials and runs on any Python startup. The attack is believed to have hit tens o404-founders.com
4404 Founders13h ago · 9 min readDrupal Commerce CVE-2026-118539: Exploited Access BypassAnonymous visitors can reach parts of a Drupal Commerce store they should never touch, and Drupal says attackers are already doing it. The fix for Drupal Commerce CVE-2026-118539 came out on 28 Octobe404-founders.com
4404 Founders13h ago · 2 min readBinance $6.3B Crypto TheftA North Korea-linked hacking group, TraderTraitor, stole roughly $6.3 billion in cryptocurrency from Binance, the largest theft in the industry's history. Binance has frozen about $3 billion on-chain,404-founders.com
4404 Founders13h ago · 2 min readSyrian Hacker Behind Fake Tweet Market Drop Gets 42 MonthsA Syrian hacker known as Th3Pr0 was sentenced to 42 months in prison for his role in a hacking conspiracy. Part of it was a fake 2013 tweet that caused a temporary $136 billion drop in the value of th404-founders.com
CCyber Knight1d ago · 6 min readThey Patched GitLab. The Bug Stayed.On 20 October, a brand-new account signed up to Alpine Linux's GitLab server and started probing it. Then the crafted CI configurations arrived, and GitLab's worker processes started crashing. Eight tnulltrace.hashnode.dev
4404 Founders1d ago · 2 min readDHS Employee Data Leak via Okta SSOA leak site published internal data on more than 41,000 Department of Homeland Security employees and contractors after hackers accessed an Okta single sign-on service used by the agency. Severity: H404-founders.com
4404 Founders1d ago · 2 min readJapan Airlines data breach via Amadeus IT GroupJapan Airlines disclosed a data breach at its IT provider Amadeus IT Group that exposed personal data of over 90,000 customers, including passport and frequent-flyer numbers for about 2,000 individual404-founders.com
4404 Founders1d ago · 10 min readVeeam CVE-2026-108142: Unauthenticated CDP Service BypassOn 27 October 2026 Veeam patched CVE-2026-108142, a CVSS 9.1 flaw in the CDP Coordinator Service of Veeam Backup & Replication 13 through which an unauthenticated attacker can bypass authorization. Bu404-founders.com
4404 Founders1d ago · 2 min readBankruptcy Noticing Center outageThe Bankruptcy Noticing Center (BNC), operated by BAE Systems for federal bankruptcy courts, experienced a cyberattack that caused a two-week outage. I read the BAE Systems statement quoted by Recorde404-founders.com
4404 Founders1d ago · 2 min readYoba malware chain via fake ChatGPT/Claude appsYoba is a malware campaign that distributes a cryptominer by disguising itself as legitimate ChatGPT and Claude desktop applications. The attackers host malicious ZIP releases on GitHub, use DLL sidel404-founders.com
