APERION releases SmartFlow SDK for secure, on-prem AI governance without cloud reliance

Help Net Security

April 3, 2026 at 7:06 AM

Actively Exploited

Overview

APERION has introduced the SmartFlow SDK, a new software development kit designed for secure, on-premises governance of artificial intelligence systems. This move comes as many companies look to distance themselves from potentially compromised cloud-based AI services, particularly following the LiteLLM supply chain attack. In that incident, attackers from the group TeamPCP breached a widely used open-source proxy in the Python ecosystem, impacting approximately 36% of cloud environments. The rise in web traffic to APERION's site, reported at 200% since the attack on March 24, suggests that organizations are seeking safer alternatives for their AI needs. This shift towards on-premises solutions reflects growing concerns about cloud security and the vulnerabilities associated with it.

Key Takeaways

Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
Affected Systems: LiteLLM, cloud-based AI services
Action Required: Transition to on-premises solutions like SmartFlow SDK.
Timeline: Ongoing since March 24, 2023

Original Article Summary

APERION launched SmartFlow SDK, providing a secure, on-premises path for enterprises migrating away from compromised cloud-based AI gateways. The launch coincides with a 200% increase in web traffic since the March 24 LiteLLM supply chain attack that compromised an estimated 36% of all cloud environments. LiteLLM was the victim of a supply chain attack in which the threat actor group TeamPCP compromised the most widely used open-source LLM proxy in the Python ecosystem through a … More → The post APERION releases SmartFlow SDK for secure, on-prem AI governance without cloud reliance appeared first on Help Net Security.

Impact

LiteLLM, cloud-based AI services

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Ongoing since March 24, 2023

Remediation

Transition to on-premises solutions like SmartFlow SDK

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Read Original Article

Related Coverage

Anthropic’s restricted Claude Mythos model may be coming to Claude Code

BleepingComputer

Anthropic is reportedly getting ready to release its Mythos model, which was initially announced in April as a restricted version due to its potential security risks. This model poses significant threats to both private and public software, raising concerns among developers and users about its implications for security. The rollout of such a model could lead to vulnerabilities being exploited if not properly managed. As the technology moves closer to public availability, it’s crucial for stakeholders to understand the risks and prepare accordingly. The situation emphasizes the need for careful consideration in how AI models are deployed, especially those that can impact software security.

May 25, 2026

FBI Chief Kash Patel’s Clothing Store Hacked in ClickFix Infostealer Attack

Hackread – Cybersecurity News, Data Breaches, AI and More

FBI Chief Kash Patel's clothing store fell victim to a ClickFix infostealer attack, which specifically targeted macOS users. The hackers tricked these users into downloading malware that steals sensitive information. This incident raises concerns not only for Patel as a public figure but also for the broader implications of malware targeting retail platforms. Such attacks can lead to significant data breaches, impacting customer trust and potentially leading to financial losses. Users of the compromised store should be vigilant about their personal data and consider reviewing their security measures to prevent similar threats in the future.

May 25, 2026

Ghost CMS Vulnerability Exploited to Hack Over 700 Websites

SecurityWeek

A vulnerability in the Ghost Content Management System (CMS) has been exploited, leading to the hacking of over 700 websites, including those of prestigious institutions like Harvard and Oxford, as well as the search engine DuckDuckGo. This breach highlights the risks associated with using outdated or unpatched software, as attackers were able to take advantage of security flaws to gain unauthorized access. The incident raises concerns about the personal data and sensitive information that could be exposed on these compromised sites. Organizations using Ghost CMS need to ensure they are running the latest version and apply any available patches to protect their websites from similar attacks in the future.

May 25, 2026

Authorities seize 800 servers used for cyberattacks and disinformation

Help Net Security

Dutch authorities have arrested two men and confiscated 800 servers believed to be involved in cyberattacks and disinformation campaigns linked to Russian activities. The arrests took place in Amsterdam and The Hague, with the suspects facing charges for violating Dutch sanctions laws. These servers were reportedly used to undermine democratic processes and disrupt both public and economic systems. The operation is part of a broader effort to combat cyber threats that target national security and public trust. This incident underscores the ongoing battle against malicious cyber activities that seek to destabilize governments and influence public opinion.

May 25, 2026

Oncology Institute Discloses Data Breach

SecurityWeek

The Oncology Institute has reported a data breach involving a third-party vendor, which has yet to be named. However, speculation points to TriZetto as a potential source of the breach. This incident raises concerns about the security of patient data, as healthcare organizations increasingly rely on third-party vendors to manage sensitive information. The breach could expose personal health information, putting affected patients at risk of identity theft and other privacy violations. As the investigation unfolds, it is crucial for healthcare providers to assess their vendor relationships and ensure that strong security measures are in place to protect patient data.

May 25, 2026

US states step up cyber defenses to protect local communities

Help Net Security

U.S. state governments are ramping up their cybersecurity efforts to better protect local communities and critical services. Many states are establishing their own cyber defense programs, which include initiatives like cybersecurity clinics and regional security operations centers (RSOCs). These programs aim to reduce costs and enhance the cybersecurity workforce, ultimately improving the resilience of local infrastructures against cyber threats. As of April 2026, states are also looking to share services and centralize procurement to better manage cyber risks. This shift reflects a growing recognition of the importance of state-level involvement in safeguarding against increasing cyber threats.

May 25, 2026