I've confirmed the data is legit by the way, multiple victim orgs. It contains a significant volume of sensitive content at orgs - for one Hudson Rock undersold the contents.
It's a massive supply chain breach due to poor AI security - not because AI is the threat, but teens can run circles around orgs obsessed with rushing out AI and poor DevOps security. Should be a wake up call.
IR teams, gooooooooooo
Massive leak of credentials and secrets at thousands of orgs where developers executed LiveLLM, terabytes of creds are circulating online now.
Root cause = orgs adopting GenAI solutions without proper security. Threat actor = the kids at TeamPCP.
Screenshot = Microsoft
https://www.hudsonrock.com/blog/largest-ai-supply-chain-breach-of-2026-litellm-hack-impacts-thousands-of-global-enterprises-claim-your-ethical-disclosure
Nightmare Eclipse has published an unpatched zero day in Microsoft Defender called ShieldBreak, gets you SYSTEM privileges from any user account
They term it RoguePlanet 2 - however it operates very differently.
https://git.projectnightcrawler.dev/NightmareEclipse/ShieldBreak/src/branch/main/ShieldBreak.cpp
I've tried it, it works on latest Windows 11.
Talk about pushing to prod before a long vacation...this is from the security researcher Prepakis Georgios (@kernelstub), who's been quite open about hosting and administrating a Matrix chat platform for the TeamPCP supply chain hackers and an odd menagerie of cybercriminals and infosec professionals/feds for months now. Many of the people in that chat are also interacting with Kernelstub via the same or similar handles in public posts on X.
Kernelstub is a prolific and accomplished offensive security researcher/hacker who frequently finds 0days like local privilege escalation (LPE) vulnerabilities and often sells or just gives them to threat actors. I hope to have more to share about all this in the not too distant future, because the whole thing is one helluva story.
being good at computer does not make you smart at not-computer.
I updated my total eclipse webcam viewer for today's eclipse!
Once totality begins you'll see a live-updating umbra, so you can race to the next webcam and see the eclipse happen over and over again.
