“The hackers gain access to a network where an open source tool commonly used by coders is being developed”
Two guys in Perth, ages 21 and 23, reached 2,500 organizations through the LiteLLM compromise and touched 3,800 GitHub repos. Microsoft, BMW, Mercedes, Snapchat. All of it through dependencies those companies pull without looking. The supply chain is the attack surface every large firm treats as somebody else’s problem, and two people found the seam. Court date is September 18.