Blog

The LiteLLM Auth Bypass Chain Ransomware Gangs Are Actually Using

A command injection bug that needed an API key stopped needing one the moment researchers chained it with a one-character Host header trick — and Qilin ransomware affiliates are already using the combo to drop cryptominers on AI gateways.