Here are some of the top Cybersecurity news articles for the past week:
🚨 PHP2Shell Vulnerabilities Under Active Exploitation
CISA added two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to its Known Exploited Vulnerabilities catalog following confirmed exploitation. The flaws can allow unauthenticated attackers to achieve remote code execution on vulnerable systems, and organizations are being urged to identify affected PHP deployments and update immediately.
🤖 LiteLLM Supply Chain Attack Exposes Developer Secrets
Attackers compromised LiteLLM’s release process and published malicious version 1.107.0 through PyPI and Docker. The compromised packages included malware capable of stealing cloud credentials, developer secrets and AI API keys, demonstrating how quickly risk can move downstream through trusted software dependencies.
💥 AI-Assisted Research Accelerates Vulnerability Discovery
Recent vulnerability research has highlighted how AI systems can increasingly assist with finding and developing complex vulnerability chains in widely deployed software. The development raises a larger question for defenders as vulnerability discovery and exploitation continue to accelerate.
🔓 Weak eMudhra CA Keys Trigger Emergency Trust Changes
Eight eMudhra intermediate certificate authority private keys were found to be recoverable, potentially allowing unauthorized certificates or code signatures to appear trusted. Major technology vendors have moved to block affected certificates and remove trust in impacted certificate hierarchies.
🛠️ Microsoft Releases Emergency .NET Security Updates
Microsoft released out-of-band updates for .NET 8, 9 and 10 to address multiple security issues, including a buffer overflow vulnerability involving the Brotli decompression algorithm. Microsoft recommends organizations update affected runtimes, rebuild self-contained applications and redeploy containers using updated images as appropriate.
