Vendor
high
advisory
Black October: Agentic Attacks and LLMJacking on AI Developer Platforms
3 TTPs 4 IOCsA coordinated wave of attacks against at least nine AI developer platforms has enabled mass LLMJacking, where stolen API keys are abused for large-scale inference traffic and resold via illicit markets.
Railway +9
credential-access
cloud
account-compromise
llmjacking
cloud-security
supply-chain-attack
ai-security
3t
4i
updated
high
advisory
Remote Code Execution Vulnerability in PyTorch Lightning via Malicious Checkpoint Files (CVE-2026-58659)
1 TTP 1 CVE 1 IOCA remote code execution vulnerability, CVE-2026-58659, exists in PyTorch Lightning through version 2.6.5, allowing attackers to craft malicious checkpoint files that execute arbitrary code by exploiting a flaw in the `_load_state` function when `LightningModule.load_from_checkpoint` is called.
PyTorch Lightning
remote-code-execution
vulnerability
python
pytorch
1t
1c
1i
critical
advisory
Compromise of PyTorch Lightning PyPI Package Versions
2 rules 1 TTP 1 IOCCompromised PyTorch Lightning PyPI packages versions 2.6.2 and 2.6.3 contain malicious code related to credential harvesting, requiring immediate credential rotation and system rebuilding.
pytorch-lightning +1
supply-chain
credential-theft
pypi
2r
1t
1i