A series of critical security incidents has impacted major development ecosystems, including PHP vulnerabilities that forced government websites offline and prompted U.S.
NSA warnings.
Meanwhile, LiteLLM suffered a supply chain attack involving malicious PyPI and Docker packages, Node.js patched four high-severity flaws, and ongoing threats targeted Plex Media Server and BeyondTrust.
Security issues in PHP and Node.js
Government websites in several countries have been temporarily taken offline after artificial intelligence systems identified critical security vulnerabilities in the PHP programming language. The US National Security Agency (NSA) has advised organizations using PHP to immediately update their systems or take them offline.
At the same time, Node.js announced that it had fixed four serious issues in its latest version. One of them allowed unknown parties to run code remotely, while two others could bypass security checks.
LiteLLM breach and stolen digital keys
LiteLLM was breached when unknown individuals inserted malicious code into software packages it published on popular platforms. The code included programs that sought to steal passwords, login details for artificial intelligence services and digital access keys, as well as remote control tools.
READ ALSO
Popular LiteLLM library hacked, version with hidden malware released
LiteLLM removed the offending packages and published instructions for fixing the problem. In a separate development, the eMudhra certificate authority in India saw its private keys fall into the wrong hands. This could theoretically allow the issuance of fake certificates and the creation of fake websites, with experts comparing the subsequent cleanup to the historic Heartbleed issue.
Other recent security incidents
The list of problems is complemented by the breach of the TiDB Cloud service, attacks that exploit already fixed vulnerabilities in Plex Media Server, as well as a critical security hole in BeyondTrust's remote support product, which had been exploited in real attacks since August.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
Top comments (0)