{"ok":true,"nota":{"id":"3bd252fd294afc43","slug":"un-ataque-a-litellm-empezo-con-una-clave-maestra-expuesta-que-nunca-se-3bd252","titulo":"Un ataque a LiteLLM empezó con una clave maestra expuesta que nunca se cambió","resumen":"Un ataque contra la cadena de suministro de LiteLLM, una herramienta usada para conectar aplicaciones con modelos de IA, comenzó por una clave maestra que había quedado expuesta. La nota señala que no rotar esas claves es un error de seguridad.","fuente":"theregister","fuenteNombre":"The Register","color":"#ff0000","autor":"Jessica Lyons","url":"https://www.theregister.com/security/2026/10/26/litellm-supply-chain-attack-started-with-an-exposed-master-key/5305544","imagen":"https://image.theregister.com/?imageId=5263597&width=800","tema":"tecnologia","subtemas":["ciberseguridad","cadena de suministro","claves de acceso","inteligencia artificial","software"],"entidades":["LiteLLM"],"formato":"dato","entretenimiento":false,"pubTs":"2026-10-26T20:30:53.000Z","indexTs":"2026-10-26T23:22:05.517Z","hash":"a45ecce15a9f2aed8c817e04559584cdee830a4488c8c1157736c2075ff666d3","tsa":{"time":"Oct 26 23:22:57 2026 GMT","provider":"freetsa.org","sobre":"sello"},"stats":{"views":0,"likes":0,"clicks":0,"dwell":0},"tipo":"normal","registro":"hallazgo","porQueImporta":"Una sola clave olvidada alcanzó para comprometer software que usan muchas empresas y desarrolladores. Cambiar contraseñas y claves de forma periódica parece un trámite aburrido, pero es lo que impide que un descuido viejo se convierta en un problema nuevo. Cualquiera que maneje una cuenta o un servicio en línea tiene la misma lección en su casa digital.","quienFirma":"The Register","confianza":"divulgacion","consulta":null},"sello":{"hash":"a45ecce15a9f2aed8c817e04559584cdee830a4488c8c1157736c2075ff666d3","sello":"cb2da6d1d670e37e9e45994854d535575388be61285ff6c0412d8a16aaa6e4c7","beacon":{"drand":{"cadena":"8990e7a9aaed2ffed73dbd7092123d6f289930540d7651336225dc172e51b2ce","ronda":6587531,"aleatorio":"fe6a0d1e32f33530ee3865ce898a933a679d836c030556cafcf9f7f9e03e9c1f","tiempo":"2026-10-26T23:22:30.000Z"},"nist":{"cadena":2,"pulso":2000959,"salida":"38EFC3652F96D1340187DD7D5B32A840F878CD33000D34F2E88A92400DF1FC86B990B57549F5A1FBF1EAABF05D417E628C2ED1C646A08A636235AA53F1954B2D","tiempo":"2026-10-26T23:22:00.000Z"},"noAntes":"2026-10-26T23:22:30.000Z"},"verificacion":{"drand":true,"nist":true},"tsa":{"time":"Oct 26 23:22:57 2026 GMT","provider":"freetsa.org","sobre":"sello"},"original":{"titulo":"LiteLLM supply chain attack started with an exposed master key","descripcion":"A 'strong illustration of the risks associated with failing to rotate a potentially exposed key'","pubDate":"Mon, 26 Oct 2026 20:30:53 +0000","url":"https://www.theregister.com/security/2026/10/26/litellm-supply-chain-attack-started-with-an-exposed-master-key/5305544"},"indexado":"2026-10-26T23:22:05.517Z"}}