{"ok":true,"nota":{"id":"fbf98cf12bcfc781","slug":"atacantes-infiltraron-una-herramienta-popular-de-ia-y-robaron-contrase-fbf98c","titulo":"Atacantes infiltraron una herramienta popular de IA y robaron contraseñas y claves secretas","resumen":"Un ataque a la cadena de suministro de LiteLLM, un software muy usado para conectar aplicaciones con modelos de IA, extrajo contraseñas y secretos de quienes lo usaban. Además, el ataque instaló un troyano de acceso remoto.","fuente":"theregister","fuenteNombre":"The Register","color":"#ff0000","autor":"Jessica Lyons","url":"https://www.theregister.com/security/2026/10/21/litellm-supply-chain-attack-hoovers-up-passwords-and-secrets/5304548","imagen":"https://image.theregister.com/?imageId=244835&width=800","tema":"tecnologia","subtemas":["ciberseguridad","ataque a cadena de suministro","robo de contraseñas","software malicioso","herramientas de inteligencia artificial"],"entidades":["LiteLLM"],"formato":"dato","entretenimiento":false,"pubTs":"2026-10-21T18:22:20.000Z","indexTs":"2026-10-21T18:38:40.551Z","hash":"4d7e481ec3621a71304d03177e884bcc1b8a823af1684f2a297ecd2331e13c78","tsa":{"time":"Oct 21 18:39:54 2026 GMT","provider":"freetsa.org","sobre":"sello"},"stats":{"views":0,"likes":0,"clicks":0,"dwell":0},"tipo":"normal","registro":"hallazgo","porQueImporta":"Cuando un programa de uso masivo se corrompe, el daño llega a todas las empresas que lo instalaron sin revisar nada, y eso incluye a startups y equipos chicos de Argentina. Las claves robadas pueden abrir cuentas de nube, bases de datos y pagos durante semanas sin que nadie lo note. Quien usa herramientas de IA sin auditar sus dependencias está, sin saberlo, dejando la puerta abierta.","quienFirma":"The Register","confianza":"divulgacion","consulta":null},"sello":{"hash":"4d7e481ec3621a71304d03177e884bcc1b8a823af1684f2a297ecd2331e13c78","sello":"2be7426e914f55fe62d3f607aff8fccf2ac8ab25f91b1ec0b0cebdd8ce66dbca","beacon":{"drand":{"cadena":"8990e7a9aaed2ffed73dbd7092123d6f289930540d7651336225dc172e51b2ce","ronda":6572565,"aleatorio":"6556b6afcea2c92d823e419b91ba50a8c3be91c43b2ae32ddc364be8bf90511d","tiempo":"2026-10-21T18:39:30.000Z"},"nist":{"cadena":2,"pulso":1993488,"salida":"313F2C87194E0AEFD2BB943F00B73797AD727F45868B18F9EC8E8565EEBD61977CAD63752CC0859926BCFC9380558824578805AA1BBCE34C74E4FE4FA6BBAB07","tiempo":"2026-10-21T18:39:00.000Z"},"noAntes":"2026-10-21T18:39:30.000Z"},"verificacion":{"drand":true,"nist":true},"tsa":{"time":"Oct 21 18:39:54 2026 GMT","provider":"freetsa.org","sobre":"sello"},"original":{"titulo":"LiteLLM supply chain attack hoovers up passwords and secrets","descripcion":"Plus a RAT for good measure - get threat hunting now","pubDate":"Wed, 21 Oct 2026 18:22:20 +0000","url":"https://www.theregister.com/security/2026/10/21/litellm-supply-chain-attack-hoovers-up-passwords-and-secrets/5304548"},"indexado":"2026-10-21T18:38:40.551Z"}}