Posts Tagged ‘Supply Chain Attack’
LiteLLM Supply Chain Attack: A Key Never Revoked
The LiteLLM supply chain attack of October 21 did not start on October 21. According to LiteLLM’s own root cause report, a master key committed to a public repository on May 27 was never revoked. An attacker used it on October 10 to reach the GitHub account of an organization owner, and eleven days later…
Read MoreRank Math Supply Chain Attack Hits WordPress
A Rank Math supply chain attack put malware into the premium plugin’s update channel: version 3.0.123 of Rank Math PRO, downloaded or updated between October 15 (20:02 UTC) and October 16 (07:12 UTC), contained a backdoor. The window lasted about 11 hours. The vendor’s clean build is 3.0.124, and the free plugin from WordPress.org is…
Read MoreJune 2026 Cybersecurity Roundup: Supply Chain Breaches, Data Extortion, and Critical CVEs
This June 2026 Cybersecurity Roundup lands in a month when the FIFA World Cup kickoff dominated the conversation, with most attention on cyber threats and fraud tied to the tournament. Away from the headlines, though, June’s most consequential incidents ran through SaaS supply chains, ransomware-driven data extortion, and identity compromise. Here’s a roundup of the…
Read MoreTop 5 Cybersecurity News Stories June 19, 2026
The five stories in this week’s Cybersecurity News Stories June 19, 2026 do not describe attacks that broke through the perimeter. They describe the infrastructure organisations depend on to stay connected, productive, and operational being compromised or left permanently undefended. An AI API gateway routing requests to OpenAI and Anthropic, now exploitable without credentials. An…
Read MoreTop 5 Cybersecurity News Stories June 12, 2026
The five stories in this week’s Cybersecurity News Stories June 12, 2026 do not describe organisations that ignored known risks or failed to apply available controls. They describe organisations — and security architectures — whose valid assumptions have been invalidated by conditions that changed without obvious warning. A compliance control that certified “data at rest”…
Read More