Aneeque Shahid

SQL Injection in LiteLLM Leads to Cloud Account Takeover! The timeline is the story, patch released April 19, and the first exploit April 26, 16:17 UTC. Twenty-six hours from advisory indexing to active exploitation. The attacker's target selection: litellm_credentials.credential_values → upstream LLM provider keys. litellm_config → proxy runtime environment. They knew the schema and they knew what to steal. They did not waste time on user tables. The attack phases: Phase 1 (65.111.27.132): SQL injection probe. Extract credentials. Phase 2 (65.111.25.67, 20 minutes later): Return with access. Run similar probes again. Same operator , two adjacent egress IPs, coordinated. A typical SQL injection leads to data theft. Here, a single stolen row can contain: OpenAI organization key with five-figure monthly spend caps. Anthropic console key with workspace admin rights. AWS Bedrock IAM credential. Compromise of that row is not just a database breach, it is a cloud account takeover with direct financial impact. Application teams deploy LiteLLM as an AI gateway. They rarely put it behind security review. The proxy handles production-tier provider keys. The keys are not monitored like cloud credentials. The stance is "dev tool" not "critical infrastructure." The pattern: TeamPCP supply chain attack last month. SQL injection exploited in 36 hours this month. LiteLLM is now a persistent target vector. The attacker velocity is accelerating. The default assumption must change: Internet-exposed AI gateways consolidate enough credential value that direct exposure is no longer defensible. Internal network or authenticated reverse proxy is the new baseline.

The Persian wind tower (بادگیر) or how a 700-year-old air conditioner could cool an environment up to 12°C with no electricity

یہ دبئی،شارجہ،یورپ نہیں بلکہ پنجاب کی صاف ستھری سڑکیں ہیں،جب سے پنجاب کی وارث مریم نواز آئی ہیں تب سے رونق لوٹ آئی ہے

انتہائی ضروری وضاحت

پنجاب میں سیاحت کے فروغ کے لیے سالٹ رینج ٹریل، ٹیکسلا، ہڑپہ اور بھیرہ کو ہیریٹیج سٹیز کے طور پر ترقی دی جا رہی ہے۔ راولپنڈی اور لاہور کی تاریخی جگہوں کی بحالی جاری ہے۔ “میگنیفیسنٹ پنجاب” کے تحت 2029 تک 170 سیاحتی مقامات کو فعال بنانے کا ہدف ہے جس سے مقامی سیاحت کو بڑا فروغ ملے گا۔ سینئر صوبائی وزیر مریم اورنگزیب