Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packages
2026-03-29T08:52:01Z•6aac79fb52c605ec507908f8227d4f382708d0461c0479022d3b6043b20ff7f3
BIG-IPCISACVE-2025-53521CVE-2026-33017CVE-2026-33634DNSF5GitGuardianKnown Exploited VulnerabilitiesLangflowLiteLLMNISTOpenAIPyPIRSACSP800-81r3TailsTeamPCPTelnyxTorTrivybug bountydata breachsecrets sprawlsupply chain
What happened
Weekly security roundup: NIST published SP 800-81r3 updating DNS security guidance; a critical unauthenticated RCE in F5 BIG-IP APM (CVE-2025-53521) is under active exploitation and added to CISA’s KEV. CISA also added CVE-2026-33017 (Langflow code injection) and CVE-2026-33634 (malicious code in Trivy) after rapid exploitation. Multiple PyPI supply-chain compromises were reported (compromised LiteLLM packages and TeamPCP backdooring the Telnyx SDK). Other highlights: an AFC Ajax data breach, GitGuardian’s report on growing secrets sprawl, OpenAI’s safety bug bounty, RSAC 2026 product launches
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 6aac79fb52c605ec507908f8227d4f382708d0461c0479022d3b6043b20ff7f3
- Enrichment time
- 2026-03-29T08:52:01Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.