LiteLLM Security Bug Exploited for Unauthorized Access
Cybercriminals are actively exploiting a critical LiteLLM RCE vulnerability that allows remote command execution on AI gateway systems.
Secure.com News
Stay updated with the latest cybersecurity news, threat intelligence, and industry updates from secure.com.
Browse by Category
MCP Developers Under Fire as Shai-Hulud Campaign Grows to 60 Packages
The Shai-Hulud PyPI attack has expanded to compromise 23 additional Python packages, bringing the total number of affected packages to 60.
New Hades Malware Deceives AI Security Systems
A new Hades malware campaign is targeting software supply chains by using deceptive tactics to fool AI-powered security systems.
Multiple VMware Stored XSS Vulnerabilities Allow Attackers to Inject Malicious Scripts
Broadcom has disclosed three stored VMware XSS vulnerabilities that allow authenticated attackers to inject malicious scripts into enterprise systems.
Internet Explorer WebBrowser Control Attack Chain Turns Clicks Into RCE
Security researchers found that Internet Explorer WebBrowser control can still turn a single click into remote code execution on Windows systems.
CISA Flags Actively Exploited SolarWinds Vulnerability as Critical Threat
CISA added a critical SolarWinds Serv-U vulnerability to its Known Exploited Vulnerabilities catalog following confirmed active exploitation attempts.
New Payload Ransomware Uses Military-Grade Encryption to Lock Windows Files
Dateline: May 26, 2026 Quick Verdict A sophisticated ransomware operation called Payload has been quietly building a global victim list since February 2026, using advanced encryption...
GitHub Adds Staged Publishing to npm to Block Automated Supply Chain Attacks
GitHub has rolled out staged publishing for npm to combat npm supply chain attacks targeting the JavaScript ecosystem.
Megalodon Malware Compromised 5,500+ GitHub Repos Within 6 Hours
The Megalodon malware attack compromised over 5,500 GitHub repositories within six hours, marking the largest automated supply chain breach in platform history.
Mini Shai-Hulud Strikes Again: 317 npm Packages Compromised in 22 Minutes
A single compromised npm maintainer account pushed 637 malicious package versions in 22 minutes, forcing npm to invalidate write-access tokens platform-wide. The Mini Shai-Hulud worm keeps...
New NGINX Zero-Day RCE Vulnerability Threatens Millions of Web Servers
Security researchers discovered a critical nginx zero day vulnerability that grants attackers remote code execution access to millions of servers.
GitHub Loses 3,800 Internal Repos to a Single Poisoned VS Code Extension
A poisoned plugin slipped past one of the most security-conscious companies on the internet, and the GitHub VS Code extension breach now puts every developer endpoint...