San FranciscoA 40-minute breach exposed secrets from 2,500 firms.
Microsoft and Nvidia weren’t hit directly, since the trust flowed through a shared open-source dependency.
Attackers compromised LiteLLM, a proxy holding every AI API key a firm uses, exfiltrating 434,000 pipelines’ credentials.
Researchers are urging affected firms to rotate every cloud and pipeline credential now.
Sources: Ars Technica