The Heart of the Infrastructure is Stopping: Simultaneous Vulnerability Events and the Silent Collapse of the Internet

In just five days, from October 17 to October 21, 2026, the infrastructure supporting the backbone of the internet was ...

LiteLLM supply chain attack hoovers up passwords and secrets

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...
xenospectrum

LiteLLM 1.107.0 Compromised Again: Malware Slipped Past Official Release Approval to Steal Credentials

The malicious LiteLLM 1.107.0 release could not be caught by checking the official GitHub tag alone. Based on the ...
PCQuest

eMudhra certificate flaw leaves some apps at risk despite browser fixes

Weak eMudhra certificate keys prompted browser blocks, but some applications may still trust them. Here's where the remaining ...
Tweakers

PHP waarschuwt voor twee ernstige bugs die makkelijk uit te buiten lijken

De makers van PHP waarschuwen website- en softwarebeheerders voor twee ernstige kwetsbaarheden in PHP. Het gaat om remote code execution-bugs die eenvoudig kunnen worden uitgebuit. PHP wil zelf later ...