Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Showing 2 most recent headlines Filtered view

The Hacker News 1 month ago

LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed LiteLLM is a widely deployed open-source AI gateway that brokers calls to more than 100 model providers behind one OpenAI-compatible interface

More from The Hacker News 16 Jun 2026, 4:39 a.m. Artificial Intelligence Disclosure Open Source Proxy Research Vulnerability

The Hacker News 11 months, 4 weeks ago

Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers

A newly disclosed critical security flaw in CrushFTP has come under active exploitation in the wild. Assigned the CVE identifier CVE-2025-54309, the vulnerability carries a CVSS score of 9.0

More from The Hacker News 20 Jul 2025, 7:35 p.m. Actively exploited CVE-2025-54309 CVE Disclosure Exploit Flaw Proxy Vulnerability

Latest cybersecurity reporting from selected sources.

Refine the feed

Volume over time

Fresh headlines available

LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers