Credential Theft Threatens Thousands Due to Malicious LiteLLM Releases
PremiumMalicious LiteLLM PyPI releases contained credential-stealing code that may have exposed secrets for 2,100+ organizations.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Friday, August 14
Lazarus Group Exploits Windows Zero-Day for Advanced Rootkit Deployment
PremiumLazarus exploits AFD.sys zero-day (CVE-2026-68820) to deploy FudModule rootkit for stealthy kernel persistence.
Microsoft Addresses Critical Windows Zero-Day Vulnerability
PremiumMicrosoft patched 'LegacyHive', a Windows zero-day vulnerability disclosed after July Patch Tuesday that allows privilege escalation.
Evooo1Bot: A New Threat Enhancing the Mirai Botnet with Sophisticated Stealth Features
PremiumA Mirai variant adds encrypted C2 communications and a credential 'sniffer' to improve stealth and persistence for botnets.
Flock Safety Implements Stricter Privacy Measures Amid Misuse Concerns
PremiumFlock Safety mandates 'Audit Assistance' for customers and reduces license plate retention to seven days to improve privacy controls.
Hackers Exploit Private APN to Breach Polish Power Plant Network
PremiumCERT.PL reports Russian-linked hackers accessed a Polish power plant OT network via a private APN, impacting critical infrastructure.
Zoom Annotation Vulnerabilities Expose Users to Potential Client Hijacking
PremiumZoom annotation vulnerabilities could allow meeting participants to take control of other attendees' clients without interaction.
Major Vulnerabilities in Belgium's eID System Expose Citizen Data
PremiumBrowser extension vulnerabilities in Belgium's eID framework allow remote code execution and full compromise of citizen accounts.
New Zero-Day Exploit 'ShieldBreak' Elevates Threat Level for Windows Users
PremiumExploit 'ShieldBreak' enables any user to spawn a SYSTEM shell on Windows via a newly released zero-day toolset.
Jewelbug APT: A Dual Threat in Cyber Espionage and Cryptocurrency Theft
PremiumJewelbug APT operators run both state espionage and cryptocurrency theft from the same web control panel.
Adobe Commerce Vulnerability Exploited Shortly After Disclosure
PremiumCritical Adobe Commerce vulnerability was targeted and exploited shortly after disclosure, risking customer account takeover.
Microsoft Urges Immediate Action on Critical Windows Vulnerabilities
PremiumMicrosoft issued massive Patch Tuesday fixes including multiple zero-days, with some exploited in nation-state campaigns.
Critical VMware vCenter Vulnerability Under Active Exploitation
PremiumCritical VMware vCenter flaw (CVE-2026-59310) is being actively exploited to deploy reverse SSH persistence backdoors.
Wednesday, August 12
BdThemes Supply Chain Breach Exploits JSON Feeds in WordPress Plugins
BdThemes supply-chain compromise poisoned JSON feeds to create rogue WordPress admin accounts, backdooring sites without modifying plugin files.
Cyberattacks Target US Water Systems Across Multiple States
Widening attacks against US water systems continue, targeting Internet-exposed PLCs; attribution reports suggest Iran-linked activity in some cases.
China-Linked Group Unleashes StormEncryptor Ransomware via N-central Vulnerability
China-linked Storm-1175 deploys StormEncryptor ransomware, likely exploiting an N-able N-central vulnerability to gain initial access.
China-Linked Hackers Exploit Critical Flaw in Cybersecurity Software to Deploy Ransomware
Microsoft warns China-linked actors are exploiting a critical flaw in N-able to deploy ransomware broadly as a launchpad.
Security Breach in Belgian eID Software Exposes Millions to Risk
Critical vulnerabilities discovered in Belgian eID software put two million users at risk of identity compromise.
Hospital Cyberattack Escalates as Ransomware Group Hijacks Social Media
Ransomware group claims 6 TB exfiltration and hijacks a hospital's Facebook page, exposing highly sensitive patient data categories.
Critical Docker Vulnerability Exposes Hosts to Malicious Container Attacks
CopyEscape (CVE-2026-17106) allows malicious docker cp operations to overwrite host files and potentially achieve root execution.
Get these articles delivered to your inbox.
Subscribe free