A critical Remote Code Execution (RCE) vulnerability in LiteLLM, a popular open-source proxy server for Large Language Models, is being actively exploited by threat actors in the wild. The vulnerability allows unauthenticated attackers to execute arbitrary commands on vulnerable systems, potentially
A critical vulnerability in LiteLLM (CVE-2026-42271) is being actively exploited in the wild, allowing attackers to chain multiple flaws and achieve unauthenticated remote code execution. The flaw affects LiteLLM’s proxy server component and can be exploited without authentication, making it a sever
Google has released an emergency security update for Chrome to patch CVE-2025-2783, a high-severity use-after-free vulnerability in the V8 JavaScript engine that’s being actively exploited in the wild. This marks the fifth zero-day vulnerability exploited against Chrome users in 2025, highlighting a
Apache has released version 2.4.68 of its widely-deployed HTTP Server, addressing 13 security vulnerabilities ranging from moderate to critical severity. The patched flaws include use-after-free conditions, denial-of-service vectors, cross-site scripting (XSS) vulnerabilities, and buffer overflow is
The Federal Communications Commission (FCC) has eliminated the July 2026 deployment deadline for Amazon’s Project Kuiper low Earth orbit (LEO) satellite broadband constellation. This regulatory relief removes pressure on Amazon to launch half of its planned 3,236 satellites by the original deadline,
Cybercriminals are weaponizing Microsoft Teams to impersonate IT support staff, exploiting the platform’s trusted workplace status to conduct social engineering attacks. Attackers leverage external access features and Teams’ chat functionality to deceive employees into surrendering credentials, inst
Recent testing has confirmed that Russian satellites possess the capability to jam GPS signals across entire continents, representing a significant escalation in electronic warfare capabilities. This space-based jamming threatens critical infrastructure, aviation, maritime navigation, financial syst
NFCShare, a sophisticated Android banking trojan, is actively spreading through fraudulent banking app updates hosted on GitHub repositories. The malware specifically targets Near Field Communication (NFC) functionality to steal payment card data and intercept banking credentials. Attackers are leve
Apple’s upcoming macOS 27 will exclusively support Apple Silicon processors, officially ending support for Intel-based Macs. This architectural shift eliminates an entire class of x86-64 vulnerabilities, significantly reduces the operating system’s attack surface, and forces security teams to reasse
A critical vulnerability in the Linux kernel, stemming from a single character typo in the netfilter subsystem, allows unprivileged local users to escalate privileges to root access. The flaw affects multiple kernel versions and has working proof-of-concept exploits publicly available. Immediate pat