Mezha

LiteLLM supply-chain attack targets credentials and installs a RAT

A compromised LiteLLM release bundled credential-stealing malware and a remote-access trojan. Anyone who ran version 1.107.0 ...

LiteLLM supply chain attack hoovers up passwords and secrets

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...
kucoin

PHP High-Severity Vulnerability 'php2shell' Threatens Millions of Websites

On October 21, according to Huntress, a security crisis potentially affecting millions of websites worldwide is brewing. Two ...
The Hacker News

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.
Security Affairs

PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws

PHP will release emergency fixes for 2 critical RCE flaws, as researchers warn of potential risks to exposed and unsupported ...
Tweakers

PHP waarschuwt voor twee ernstige bugs die makkelijk uit te buiten lijken

De makers van PHP waarschuwen website- en softwarebeheerders voor twee ernstige kwetsbaarheden in PHP. Het gaat om remote code execution-bugs die eenvoudig kunnen worden uitgebuit. PHP wil zelf later ...