Key developments this week include a critical remote‑code‑execution bug uncovered in every GitLab release since 2014, a supply‑chain compromise of the widely used LiteLLM Python library, and newly‑added exploit‑trackers in CISA’s KEV catalog targeting Plex Media Server. Google…
Continue reading Critical Software Flaws and Supply‑Chain Attacks Surge Across Major PlatformsKey developments: – The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an immediate call to action for all Citrix NetScaler users to apply newly disclosed patches, warning that the flaws are actively being exploited in Europe…
Continue reading Critical Cybersecurity Alerts: Citrix NetScaler Patch Urgency, GitLab Zero‑Day Fix, and FBI Botnet Domain SeizuresA newly identified GhostAction operation has injected malicious GitHub Actions workflows into over 340 repositories, using compromised maintainer accounts to harvest credentials and steal secrets. This supply‑chain attack demonstrates how attackers can weaponize CI/CD pipelines to spread quickly…
Continue reading GhostAction Campaign Hijacks Hundreds of GitHub Repos, FBI Cracks Down on Flax Typhoon Tools, Anthropic Rolls Out Free AI Scans
