Briefing del 2026-04-29

Un'iniezione SQL di pre-autenticazione in LiteLLM è attivamente sfruttata, e gli attaccanti stanno andando dritti verso le chiavi dietro ogni gateway AI che gestisce.

• LiteLLM SQLi Exposes Keys Behind AI Gateways
• Supply-Chain Victims Become VECT’s Ransomware Pool
• GitHub Internal Protocol Flaw Exposes Entire Repos
• Medtronic Breach Exposes Corporate Data, Not Products
• Sleeper Extensions Turn Open VSX Into Malware Delivery
• LeRobot Deserialization Flaw Can Take Over Robots and Controllers
• Stolen Data Forums Turn Small Breaches Into Bigger Risk
• Ransomware Rivals Expose Each Other’s Operations
• State Privacy Fines Turn Into Multi-State Enforcement
• macOS Users Become the Weak Link in Fake Updates
• Bluetooth Firmware Flaws Put Bikes and Scooters at Risk
• Marimo Zero-Day Turns AI Demo Hosting Into Malware Delivery