Supplier Quality Leader

Massive supply-chain attack sees terabytes of data belonging to some of the world's biggest and most sensitive organizations leaked online. * More than 2,500 organizations, including Cisco, Samsung, AWS, Airbus U.S. Space & Defense, Thales, and the London Stock Exchange Group, have credentials harvested during a supply-chain attack on LiteLLM * LiteLLM was not directly hacked by the hacking group TeamPCP, which found their way in thanks to a compromised build of an open-source security scanner * Some of the credentials still work, nearly five months after the original breach, indicating that there is still a persistent security risk until they are changed Security firms CloudSEK and Hudson Rock have claimed more than 2,500 organizations have had credentials harvested in a supply-chain attack on LiteLLM. LiteLLM, an open source gateway which translates API calls for over 100 large language models into a single OpenAI-compatible format, was not directly compromised in the attack, as hackers targeted a known vulnerability in Aqua Security's Trivy. The list included many large and critical service providers, including but not limited to Cisco, Samsung, Salesforce, and Amazon Web Services, as well as Airbus U.S. Space & Defense, Thales Group, Deutsche Bahn, Munich Re, and the London Stock Exchange Group. Latest Videos FromTechRadar An attack that is still a concern nearly five months later. The original attack occurred on March 24 2026 and was spearheaded by a financially motivated hacking group called TeamPCP, which compromised Trivy, an open source security tool that scans for vulnerabilities. The modified package, which was subsequently downloaded and 'invited' in by LiteLLM without checking its ID- an automated process that essentially allowed a poisoned version of the trusted tool in- gained server administrator privileges and then installed a stealer. The stealer compromised credentials and secrets far more valuable than corporate data, including Cloud keys, SSH keys, Kubernetes tokens, environment variables, repository and package-publishing tokens, and AI provider keys. These are arguably worse from a security standpoint than a singular breach because of both the scale of the attack and the fact that hackers now had a 'key' to many security doors rather than having to run exploits to get there. The victim-scale research done by CloudSEK was further corroborated the following day by Hudson Rock, and it painted a grim picture of what was still an outstanding issue nearly 5 months after the original attack. The irony is that some of the credentials still work: Independent researcher Kevin Beaumont said some of the compromised keys were still valid after he tested them, even as the impacted organization insisted it had 'rotated' those keys to new ones. CloudSEK's figures indicate 2,500-plus companies and 434,000 CI/CD pipelines were compromised, while Hudson Rock has released a 153 GB archive of the exfiltrated material after examining a 195 TB file it had obtained. Both firms are running domain-lookup tools so organizations can check their own exposure online. Whether these revelations lead organizations to double-check their use of AI tools in multiple mission-critical instances that could compromise not only customer data but their own trade secrets down the line remains to be seen. Follow TechRadar on Google News and add Wilson’s Media LLC as a preferred source to get its expert news, reviews, and opinion in your feeds. More than 2,500 organizations, including Cisco, Samsung, AWS, Airbus U.S. Space & Defense, Thales, and the London Stock Exchange Group, have credentials harvested during a supply-chain attack on LiteLLM LiteLLM was not directly hacked by the hacking group TeamPCP, which found their way in thanks to a compromised build of...

Thales, Systematic join Forces to modernize Denmark's air defense. Thales and Systematic have formed a strategic partnership to develop integrated air defense capabilities for the Danish Armed Forces. The collaboration combines Systematic's command-and-control software with Thales' air defense technologies, including the SAMP/T NG missile defense system, to support Denmark's modernization of its air and surface-based air missile defense architecture. Rather than developing a new weapon system, the deal focuses on improving how different air defense assets communicate and operate together. The companies said the goal is to deliver interoperable capabilities that can integrate with Denmark's existing defense architecture and NATO operations. The alliance will also support the Danish Acquisition and Logistics Organisation, which oversees defense procurement, while strengthening Denmark's domestic defense industry through local industrial participation and potential export opportunities. "This partnership is an important step to strengthen Denmark's air defense capabilities with trusted European technology, while building on the strong industrial capabilities we have developed here in Denmark," Systematic vice president for business development Klaus Qvist said. Denmark expands defense partnerships. The Thales-Systematic agreement follows a series of partnerships aimed at strengthening Denmark's defense capabilities and industrial base. In May, Australia's DroneShield and Denmark's Terma signed an agreement to develop interoperable counter-drone capabilities, creating a framework for joint testing and future deployment. In March, Spain's Navantia proposed a long-term partnership to support Denmark's next generation of naval programs, offering local industrial participation, training, and lifecycle support with deliveries beginning in 2030. This follows a December 2025 agreement between Heckler & Koch and Rheinmetall Nordic to jointly deliver integrated small arms, fire control, and weapon accessory solutions for European military and law enforcement customers.