βΌοΈπ¨ BREAKING: Security researchers have uncovered all of those who fell victim to the LiteLLM supply chain attack by obtaining its archive: 153GB holding 433,909 files from 2,488 organisations.
According to Hudson Rock and CloudSEK, victims include Nvidia, AWS, Samsung, Boeing, Intel and more.
This is one of the biggest hits by TeamPCP yet.
The archive contains 118,829 CI/CD runner dumps attributed to corporate domains, with signing secrets and AI provider API keys sitting in plaintext.
If you ran LiteLLM 1.82.7 or 1.82.8, assume every secret in that environment is burned.
Link to article: https://infostealers.com/article/largest-ai-supply-chain-breach-of-2026-litellm-hack-impacts-thousands-of-global-enterprises-claim-your-ethical-disclosure/
Link to full list of victims: https://exposure.cloudsek.com/ai-supply-chain-incident
According to Hudson Rock and CloudSEK, victims include Nvidia, AWS, Samsung, Boeing, Intel and more.
This is one of the biggest hits by TeamPCP yet.
The archive contains 118,829 CI/CD runner dumps attributed to corporate domains, with signing secrets and AI provider API keys sitting in plaintext.
If you ran LiteLLM 1.82.7 or 1.82.8, assume every secret in that environment is burned.
Link to article: https://infostealers.com/article/largest-ai-supply-chain-breach-of-2026-litellm-hack-impacts-thousands-of-global-enterprises-claim-your-ethical-disclosure/
Link to full list of victims: https://exposure.cloudsek.com/ai-supply-chain-incident
π€£8π4π±2π₯1
βΌοΈ German digital rights group HateAid has filed a criminal complaint against Meta, Ray-Ban owner EssilorLuxottica and retailers Fielmann, Apollo-Optik, Mister Spex and MediaMarkt over the Ray-Ban Meta Wayfarer AI glasses.
It invokes a federal law banning the sale of communication devices designed to film people without them noticing. Frankfurt cybercrime prosecutors (ZIT) confirmed receipt and are assessing whether to open a probe.
It invokes a federal law banning the sale of communication devices designed to film people without them noticing. Frankfurt cybercrime prosecutors (ZIT) confirmed receipt and are assessing whether to open a probe.
π24π₯8π3β€1π©1
βοΈAll Twitch content is now automatically opted in to Amazon generative-AI training by default, if you don't turn it off.
"If it was opt-in, nobody would opt-in," Twitch chief product officer Mike Minton said.
The off switch is web-only, buried under Settings, Security and Privacy. It won't stop your chat being used in streams that stayed opted in.
Opting out only covers your own channel. Chat in someone else's stream, and their setting decides whether your messages get used:
https://help.twitch.tv/s/article/twitch-account-settings?language=en_US#FAQ
"If it was opt-in, nobody would opt-in," Twitch chief product officer Mike Minton said.
The off switch is web-only, buried under Settings, Security and Privacy. It won't stop your chat being used in streams that stayed opted in.
Opting out only covers your own channel. Chat in someone else's stream, and their setting decides whether your messages get used:
https://help.twitch.tv/s/article/twitch-account-settings?language=en_US#FAQ
π©31π€£5π3π€¬3β€1π1
An RTX 5090 owner went to great lengths to protect his GPU power cable from bending and overheating, using a mesh side panel with a cutout.
The thing still lit up. He was using a Goghunters power supply and blames the supplied cable. His warranty claim is still ongoing.
He bought a Seasonic instead. A repair tech replaced the burned header for 600 RMB (~$90).
The thing still lit up. He was using a Goghunters power supply and blames the supplied cable. His warranty claim is still ongoing.
He bought a Seasonic instead. A repair tech replaced the burned header for 600 RMB (~$90).
π8π’7π2π₯1π€―1
βΌοΈ Starlink's support page now puts Poland outside its European roaming region, "treated as Poland-only for home-country use." Existing Polish accounts lose unrestricted roaming August 17. Poland and Cyprus are the only EU states excluded.
Poland spends about $50 million a year keeping Ukraine's Starlink terminals online. After SpaceX cut Poland out of Starlink's European roaming region, foreign Minister RadosΕaw Sikorski started threatening to stop payments. SpaceX has given no reason.
Poland spends about $50 million a year keeping Ukraine's Starlink terminals online. After SpaceX cut Poland out of Starlink's European roaming region, foreign Minister RadosΕaw Sikorski started threatening to stop payments. SpaceX has given no reason.
π12π€¬6π€―3π€ͺ2
Meta almost blocked a million accounts to comply with Australiaβs Social Media Ban.
Meta is using AI to guess how old you are from what you post.
Its AI scans profiles, posts, comments, bios and captions for contextual tells, birthday messages, references to school grades, then cuts off accounts judged to be under 16.
Source: https://about.fb.com/news/2026/08/metas-compliance-with-australias-social-media-ban/
Meta is using AI to guess how old you are from what you post.
Its AI scans profiles, posts, comments, bios and captions for contextual tells, birthday messages, references to school grades, then cuts off accounts judged to be under 16.
Source: https://about.fb.com/news/2026/08/metas-compliance-with-australias-social-media-ban/
π©12π±11π6π4π2
βΌοΈ Apple is sending threat notification alerts to mercenary spyware targets, like those attacked with Pegasus. They now appear on the iPhone Lock Screen and in Settings.
Apple also sends an email from threat-notifications@email.apple.com, and you can verify it's real at http://account.apple.com.
Real ones never ask you to click or install anything. ;-)
https://support.apple.com/en-us/102174
Apple also sends an email from threat-notifications@email.apple.com, and you can verify it's real at http://account.apple.com.
Real ones never ask you to click or install anything. ;-)
https://support.apple.com/en-us/102174
π23π7β€4π€4π©3π€£3
βΌοΈ One of our Israeli followers received a real threat notification from Apple after being targeted by spyware. They told us their phone battery had been draining unusually fast.
Before this, they had been arrested by Israeli security services (Shin Bet) on suspicion of treason. The accusation turned out to be false, because their work had in fact been directed against Israel's enemies.
Before this, they had been arrested by Israeli security services (Shin Bet) on suspicion of treason. The accusation turned out to be false, because their work had in fact been directed against Israel's enemies.
π©22β€8π€ͺ7π¨5π1π€―1
βοΈAnthropic is internally running a model more capable than Mythos 5, but says it has no plans to release it to the public.
Its August 14 risk report calls "Model 2" a "noticeable improvement" for internal work: coding, data generation and agentic tasks.
Anthropic also raised its misalignment risk rating from "very low" to "low", citing uncertainty after recent cyber-evaluation incidents.
https://www-cdn.anthropic.com/f61d49fa5596956a5dec75fea0e973bf6a6a8378/Redacted%20Risk%20Report%20August%202026%20.pdf
Its August 14 risk report calls "Model 2" a "noticeable improvement" for internal work: coding, data generation and agentic tasks.
Anthropic also raised its misalignment risk rating from "very low" to "low", citing uncertainty after recent cyber-evaluation incidents.
https://www-cdn.anthropic.com/f61d49fa5596956a5dec75fea0e973bf6a6a8378/Redacted%20Risk%20Report%20August%202026%20.pdf
π©34π3π€―3π€£3π€ͺ1