Geek-Guy.com

Tag: ecosystem

TeamPCP Compromised LiteLLM in AI Supply Chain Attack

A supply chain attack targeting the open-source AI ecosystem shows how threat actors are increasingly abusing developer tools and AI infrastructure to steal credentials and compromise cloud environments.  Researchers found that TeamPCP compromised LiteLLM, a widely used open-source Python library that connects applications to more than 100 LLM providers through OpenAI-compatible APIs.   The attack reportedly…

Reinvent Debuts REVIVE Command Center for Partners

Reinvent Telecom, a technology ecosystem platform provider, has announced the launch of REVIVE, a unified command center for partners to manage their Reinvent-powered technology businesses. Platform centralizes customer accounts, services records, and more REVIVE provides partners with a centralized way to manage customer accounts, access solution information, monitor services, and support ongoing customer needs through…

TD SYNNEX Adds BCM One Voice and UCaaS Services

TD SYNNEX is adding more communications firepower to its partner ecosystem through a new partnership with BCM One, bringing voice, network services, and white-label UCaaS into the mix. Through the agreement, partners can now offer Pure IP’s global voice and network services alongside SkySwitch’s white-label UCaaS platform. It makes it much easier to integrate communications…

Tines Targets Partner-Led Growth in North America

Tines is expanding its channel and technology partner ecosystem as enterprise demand grows for intelligent workflows that connect automation, AI, and human decision-making across security and IT operations. The intelligent workflow platform announced 75 new technology partners for fiscal year 2026, along with 25% growth in its channel partner network.  The company said collaborations with…

Microsoft patched an ‘agent-only’ role that was not

An administrative role meant for AI agents within Microsoft’s Entra ID ecosystem could allow privilege escalation and tenant takeover attacks, as it had privileges over more than agent-related objects. Researchers at Silverfort found that users assigned to Microsoft’s “Agent ID Administrator” role, scoped to agent-related objects like blueprints and agent identities, could take ownership of…

RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace

Leaked data from RAMP reveals Russia’s ransomware ecosystem, analyzing 1,732 threads, 7,707 users, and 340,000 IP records from the forum. RAMP was not just another dark web forum. It was one of the clearest examples of how ransomware has become an organized marketplace, with sellers, buyers, brokers, and recruiters all playing different roles in the…

$293M KelpDAO Crypto Heist Exposes Cross-Chain Weaknesses in DeFi

A $293 million cryptocurrency theft has rocked the decentralized finance (DeFi) ecosystem, with KelpDAO at the center of an attack now suspected to be linked to North Korea’s Lazarus Group.  The attack highlights how quickly sophisticated attackers can exploit weaknesses in cross-chain infrastructure. “Preliminary indicators suggest attribution to a highly sophisticated state actor, likely DPRK’s…

CCTV Crackdown: India Moves to Block Chinese Surveillance Cameras

India is preparing for a major shift in its surveillance ecosystem as the government tightens rules around internet-connected CCTV cameras. The move is primarily aimed at addressing rising concerns over national security and data privacy risks linked to foreign-made devices. Authorities have found that several widely used CCTV systems may not be as secure as…

HONOR and ARRI Announced Strategic Technical Collaboration to Bring ARRI Image Science into Next-Generation Consumer Devices

Leading AI device ecosystem company HONOR has entered into a strategic technical collaboration with ARRI, the world-renowned designer and manufacturer of professional camera technology for cinematic storytelling. This landmark partnership marks a significant step in extending established cinematic standards into the rapidly evolving world of mobile imaging.

Shai-Hulud-style NPM worm hits CI pipelines and AI coding tools

A massive Shai-Hulud-style npm supply chain worm is hitting the software ecosystem, burrowing through developer machines, CI pipelines, and AI coding tools. Socket researchers uncovered the active attack campaign and called it SANDWORM_MODE,  derived from the “SANDWORM_*” environment variable switches embedded in the malware’s runtime control logic.” At least 19 typosquatted packages were published under…

Keeping Google Play & Android app ecosystems safe in 2025

Posted by Vijaya Kaza, VP and GM, App & Ecosystem Trust The Android ecosystem is a thriving global community built on trust, giving billions of users the confidence to download the latest apps. In order to maintain that trust, we’re focused on ensuring that apps do not cause real-world harm, such as malware, financial fraud,…

OpenClaw Adds VirusTotal Scanning to AI Agent Marketplace

OpenClaw has moved to strengthen security across its fast-growing agent ecosystem by integrating VirusTotal into its ClawHub skill marketplace.  The change follows reports that hundreds of malicious skills were circulating undetected. We “… upload full skill bundles for Code Insight analysis, giving the AI a complete picture of the skill’s behavior rather than just matching…

OpenClaw Adds VirusTotal Scanning to AI Agent Marketplace

OpenClaw has moved to strengthen security across its fast-growing agent ecosystem by integrating VirusTotal into its ClawHub skill marketplace.  The change follows reports that hundreds of malicious skills were circulating undetected. We “… upload full skill bundles for Code Insight analysis, giving the AI a complete picture of the skill’s behavior rather than just matching…

OpenClaw Adds VirusTotal Scanning to AI Agent Marketplace

OpenClaw has moved to strengthen security across its fast-growing agent ecosystem by integrating VirusTotal into its ClawHub skill marketplace.  The change follows reports that hundreds of malicious skills were circulating undetected. We “… upload full skill bundles for Code Insight analysis, giving the AI a complete picture of the skill’s behavior rather than just matching…

OpenClaw Adds VirusTotal Scanning to AI Agent Marketplace

OpenClaw has moved to strengthen security across its fast-growing agent ecosystem by integrating VirusTotal into its ClawHub skill marketplace.  The change follows reports that hundreds of malicious skills were circulating undetected. We “… upload full skill bundles for Code Insight analysis, giving the AI a complete picture of the skill’s behavior rather than just matching…