LiteLLM supply chain attack hoovers up passwords and secrets

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...
kucoin

PHP High-Severity Vulnerability 'php2shell' Threatens Millions of Websites

On October 21, according to Huntress, a security crisis potentially affecting millions of websites worldwide is brewing. Two ...
InfoQ

Microsoft Previews dotnetup: Toolchain Manager for .NET SDKs and Runtimes

Microsoft has released a public preview of dotnetup, a cross-platform toolchain manager that installs and updates .NET SDKs ...
Security Affairs

PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws

PHP will release emergency fixes for 2 critical RCE flaws, as researchers warn of potential risks to exposed and unsupported ...