LiteLLM supply-chain attack and critical PHP CVEs drive widespread exploitation
1. Executive summary LiteLLM, an open-source AI gateway, confirmed on 21 October 2026 that stolen developer tokens were used to publish a malicious release, version
1. Executive summary LiteLLM, an open-source AI gateway, confirmed on 21 October 2026 that stolen developer tokens were used to publish a malicious release, version
1. Executive summary Ransomware crews tracked as Qilin and Inc are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS GlobalProtect portals
1. Executive summary This week's Check Point bulletin carries four patched vulnerabilities relevant to EMEA financial services, of which one is confirmed exploited in
1. Executive summary Microsoft Threat Intelligence has published a detailed technical analysis of DeadLock, a Rust-based ransomware encryptor in active deployment since July 2025. DeadLock
1. Executive summary Q2 2026 saw sustained ransomware operational tempo against enterprise targets, with Qilin (no MITRE ATT&CK profile; attribution unconfirmed) accounting for 14.
1. Executive summary A GuidePoint Security report details how data-extortion groups — principally FulcrumSec (active since ~September 2025) and DragonForce (active since 2023) — are using LLMs
1. Executive summary The FortiBleed campaign — a large-scale credential-harvesting operation active since February 2026 — has been linked by SOCRadar's Threat Research Unit