LiteLLM supply chain attack hoovers up passwords and secrets

The feed is a security news digest covering active exploitation, critical vulnerabilities, supply-chain compromise, ransomware, credential and secret theft, data breaches, espionage, AI-related security risks, and regulatory developments. Notable items include a LiteLLM supply-chain attack stealing passwords and secrets, a critical PHP flaw with public exploits, Palo Alto firewall exploitation by ransomware groups, compromised eMudhra certificate-authority keys enabling website impersonation, and multiple in-the-wild zero-days affecting Cisco and Ivanti products. The dataset contains no CVE-ID