Mercor's 4TB Nightmare: LiteLLM's Supply Chain Poison Reaches AI Hiring Giant
LiteLLM lurks in 36% of cloud environments — and now it's bitten Mercor hard. Extortionists boast 4TB of pilfered data, from video interviews to VPN creds.
⚡ Key Takeaways
- LiteLLM's 36% cloud prevalence turned a 40-minute PyPI slip into thousands of potential victims, including Mercor.
- Lapsus$ claims 4TB Mercor data theft — PII, code, creds — highlighting AI firms' OSS vulnerabilities.
- Supply chain attacks like this echo SolarWinds; AI startups must harden deps or face trust implosion.
🧠 What's your take on this?
Cast your vote and see what Threat Digest readers think
Worth sharing?
Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.
Originally reported by SecurityWeek
Related Stories
Compliance & Policy
WhatsApp's VBS Malware Sneaks Past UAC, Microsoft Says – And We're Not Impressed
Compliance & Policy
Iranian Hackers Nab FBI Director's Old Gmail—FBI Systems Hold Firm
Cloud Security
TeamPCP's Supply Chain Onslaught Hits Databricks, Splits Ransomware Into Two Deadly Tracks
Compliance & Policy