LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The feed reports multiple significant cybersecurity incidents, led by the compromise of LiteLLM 1.107.0 through a software supply-chain attack delivering a credential stealer and backdoor. It also highlights critical actively exploited or publicly weaponized vulnerabilities, including PHP2Shell unauthenticated remote code execution flaws, FortiSIEM CVE-2026-106173, and PAN-OS CVE-2026-0257 authentication bypass. Additional events include Tor relay hijacking targeting SSH credentials, CA private-key compromise, ransomware activity, espionage campaigns, data exposure, and malicious use of AI and