Security boffins scoured the web and found hundreds of valid API keys

A batch of infosec items from The Register highlights multiple high-impact risks: widespread exposed API credentials on public websites; several supply‑chain compromises (notably the Trivy compromise that led to credential‑stealing malware across many cloud environments and PyPI package infections such as LiteLLM); new AI-related supply‑chain and deepfake threats (poisoned documentation for coding agents and political deepfakes); surge in social engineering—voice phishing and Signal‑support impersonation—and novel fraud using virtual smartphones; plus large‑scale IoT botnets DDoS disruptions,