{"podcast":{"title":"The Backup Wrap-Up","slug":"the-backup-wrap-up-758069","podcast_index_feed_id":758069,"rss_url":"https://feeds.captivate.fm/backupwrapup/","website_url":"https://www.backupwrapup.com","image_url":"https://artwork.captivate.fm/4670d4e3-81d6-4770-aeca-fe0331f5ce9e/IO00Uwof5u-hiUJElhkbBmKT.jpg","author":"W. Curtis Preston (Mr. Backup)","episode_count":355,"summary":"Formerly known as \"Restore it All,\" The Backup Wrap-up podcast turns unappreciated backup admins into cyber recovery heroes. After a brief analysis of backup-related news, each episode dives deep into one topic that you can use to better protect your organization from data loss, be it from accidents, disasters, or ransomware. The Backup Wrap-up is hosted by W. Curtis Preston (Mr. Backup) and his co-host Prasanna Malaiyandi. Curtis' passion for backups began over 30 years ago when his employer, a $35B bank, lost its purchasing database – and the backups he was in charge of were worthless. After miraculously not being fired, he resolved to learn everything he could about a topic most people try to get away from. His co-host, Prasanna, saw similar tragedies from the vendor side of the house and also wanted to do whatever he could to stop that from happening to others. A particular focus lately has been the scourge of ransomware that is plaguing IT organizations across the globe. That's why in addition to backup and disaster recovery, we also touch on information security techniques you can use to protect your backup systems from ransomware. If you'd like to go from being unappreciate…","last_synced_at":"2026-07-06T22:18:00.235096+00:00","page_url":"https://stenobird.com/podcast/the-backup-wrap-up-758069"},"episode":{"title":"Emergency Episode: The PyPI Software Supply Chain Attack You Need to Know About","slug":"emergency-episode-the-pypi-software-supply-chain-attack-you-need-to-know-about","published_at":"2026-03-26T11:00:00+00:00","page_url":"https://stenobird.com/podcast/the-backup-wrap-up-758069/emergency-episode-the-pypi-software-supply-chain-attack-you-need-to-know-about","show_page_url":"https://stenobird.com/podcast/the-backup-wrap-up-758069","url":"https://www.backupwrapup.com/pypi-software-supply-chain-attack","audio_url":"https://episodes.captivate.fm/episode/25c5e7aa-cc7b-4f9f-9654-8417f04a7f55.mp3","summary":"A PyPI software supply chain attack hit LiteLLM — a library pulled into developer environments 97 million times a month — and if you use it, you may already be compromised. This wasn't a fake package or a typo-squatting trick. Attackers stole real credentials, published malicious code as the real thing, and walked out with SSH keys, cloud credentials, Kubernetes tokens, API keys, and more — all encrypted and sent home before anyone knew what happened. I'm doing something I've never done before: an emergency episode, recorded and published immediately because this is that serious. I brought in Dr. Mike Saylor, co-author of our book Learning Ransomware Response and Recovery , and my co-host Prasanna Malaiyandi to break down exactly what happened, how to find out if you were hit, and what you need to do to protect yourself going forward. We open with a story from 1982 that perfectly captures what this attack really is — getting poisoned by something you trusted completely. That framing matters. This wasn't a failure of the library. It was a failure of the supply chain. And it can happen again. Chapters: 00:00:00 - Intro: Why this is an emergency episode 00:01:35 - Meet the guests: Dr. Mike Saylor and Prasanna Malaiyandi 00:02:31 - The Tylenol poisoning analogy and what it means for software supply chains 00:05:51 - What LiteLLM is and what the malware actually did to your environment 00:09:04 - Dependencies explained: why you're affected even if you didn't install LiteLLM directly 00:12:24 - How to find out if you were hit: the first things to check right now 00:14:23 - IOCs and TTPs: what to look for in your logs and on your systems 00:19:07 - Network indicators: unusual traffic and what it tells you 00:22:12 - How security teams can find out if developers installed it w…","meta_description":"A PyPI software supply chain attack hit LiteLLM — a library pulled into developer environments 97 million times a month — and if you use it, you may alrea…","key_points":[],"chapters":[],"topics":[],"duration_seconds":3342,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/the-backup-wrap-up-758069/episodes/emergency-episode-the-pypi-software-supply-chain-attack-you-need-to-know-about/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/the-backup-wrap-up-758069/emergency-episode-the-pypi-software-supply-chain-attack-you-need-to-know-about.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}