A 40-minute breach exposed secrets from 2,500 firms.

Microsoft and Nvidia weren’t hit directly, since the trust flowed through a shared open-source dependency.

Attackers compromised LiteLLM, a proxy holding every AI API key a firm uses, exfiltrating 434,000 pipelines’ credentials.

Researchers are urging affected firms to rotate every cloud and pipeline credential now.

Sources: Ars Technica