The AI Gateway Becomes a Target: Measuring LiteLLM and Kestra Exposure

<h2> TL;DR </h2> <ul> <li>A Patch Tuesday release is the single monthly batch in which Microsoft publishes security fixes for Windows, Office, Exchange Server and its server

<h1> How much of the public internet runs on Caddy? A ZoomEye measurement of 1.7 million assets </h1> <h2> What the number is for </h2> <p>Caddy is a web server written in Go, and

<p>In May 2026, a worm called Shai-Hulud compromised 42 TanStack packages — including <code>@tanstack/react-router</code>, a library sitting in millions of JavaScript projects. It

<!-- SC_OFF --><div class="md"><p>New paper from UC Santa Barbara </p> <p>They formalized four attack classes against LLM API routers (the intermediaries that dispatch

<!-- SC_OFF --><div class="md"><p>LiteLLM is widely used in LLM/agent pipelines, which makes this supply chain attack particularly concerning.</p> <p>Malicious releases (via

<h1> Building an Exposure Baseline: A Repeatable ZoomEye Method for Vulnerability Response </h1> <p>Exposure measurement is most useful when it is done before it is needed. An