CloudSEK

CloudSEK is a cybersecurity and threat intelligence company that specializes in digital risk management, vulnerability assessment, and AI-driven security analytics. For enterprise AI governance, CloudSEK provides tools to monitor external threats targeting AI systems and detect exposure of sensitive training data or model architectures in open internet sources. This becomes increasingly critical as organizations need to protect proprietary AI models and ensure compliance with data security requirements across their AI infrastructure.

1 item

ResearchGlobal2026-08-12

LiteLLM Supply Chain Attack Hit 2,500 Orgs Through Malicious PyPI Packages

Researchers at CloudSEK confirmed that two malicious versions of LiteLLM, a widely used AI proxy library, were published to PyPI and exfiltrated AI provider keys, cloud credentials, SSH keys, and runtime secrets from over 2,500 organizations. The attack cascaded from a prior compromise of Aqua Security's Trivy scanner and exposed approximately 434,000 CI/CD pipelines during a 40-minute window. CloudSEK concludes that AI infrastructure has become a high-value attack target, and that open-source AI dependency management is a critical unaddressed gap in most enterprise supply chain security programs.

supply chain security LiteLLM PyPI credential exposure AI infrastructure risk third-party dependencies CI/CD security CloudSEK