Fernando Tucci
6 articles
-
BlogYour AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise
TeamPCP orchestrated one of the most sophisticated multi-ecosystem supply chain campaigns publicly documented to date. It cascaded through developer tooling and compromised LiteLLM and exposed how AI proxy services that concentrate API keys and cloud credentials become high-value collateral when supply chain attacks compromise upstream dependencies.
March 26th, 2026 26 minPeter Girnus, Deep Patel, Simon Dulude, Ashish Verma…
Read article -
BlogAI 堆疊根金鑰外洩警訊：LiteLLM PyPI 供應鏈事件深度解析
LiteLLM PyPI 資料外洩事件說明：惡意版本如何竊取雲端登入憑證、SSH 金鑰以及 Kubernetes 機密，了解衝擊與緊急防範步驟。
March 25th, 2026 6 minFernando Tucci
Read article -
BlogCISOs in a Pinch: A Security Analysis of OpenClaw
Learn about OpenClaw (a sovereign agent) and how this can be viable for enterprises.
March 10th, 2026 5 minFernando Tucci
Read article -
Blog爆紅 AI 的隱性威脅：OpenClaw 透露了代理式 AI 助理的哪些風險？
OpenClaw (亦稱 Clawdbot 或 Moltbot) 象徵著代理式 AI 的全新疆土：強大、高度自主，而且令人訝異的是非常容易使用。本文比較它與前輩們的能力差異，並點出代理式 AI 典範固有的資安風險。
February 6th, 2026 14 minSalvatore Gariuolo, Vincenzo Ciancaglini, Fernando Tucci
Read article -
ResearchStay Ahead of AI Threats: Secure LLM Applications With Trend Vision One
Trend Vision One™ tackles 9 of OWASP’s Top 10 LLM vulnerabilities, offering comprehensive protection against prompt injection, data leakage, AI supply chain risks, and other critical flaws.
October 14th, 2025 4 minFernando Cardoso, Dave McDuff, Fernando Tucci, Kim Kinahan…
Read article -
ResearchThe Road to Agentic AI: Navigating Architecture, Threats, and Solutions
As agentic AI systems grow increasingly complex, it becomes clear that this class of applications relies on a multi-layered architecture. Trying to chart such architecture reveals several security risks that could plague each layer. This article investigates the possible scenarios and offers actionable insights to secure each layer and combat such threats.
July 28th, 2025Fernando Tucci, Vincenzo Ciancaglini, Marco Balduzzi, Salvatore Gariuolo…
Read article