Daily Cyber News: Exposed key turns LiteLLM release into a supply-chain attack

A poisoned LiteLLM release exposed users to credential theft and remote access. The attack began with a master key accidentally published in a public repository in May. The file was removed, but the key wasn’t revoked.

Key context: The malicious package could steal browser data, cloud credentials, and keys for several AI providers.

Additional detail: The larger lesson is simple.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, credential theft, Exposed, LiteLLM, release, supply-chain, attack.

Daily Cyber News: PHP attacks trigger an urgent inventory and patch deadline

Organizations running PHP face active exploitation attempts against two newly disclosed security issues. Federal civilian agencies were ordered to patch by Thursday, and other organizations were told to identify every PHP system and update it. Thousands of failed attack attempts have been reported, although successful exploitation and potential victims haven’t been confirmed.

Key context: PHP supports a large share of websites, which makes incomplete inventories a serious exposure.

Additional detail: The larger lesson is that widely deployed software creates systemic risk when organizations don’t know which versions they run or who owns them.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, active exploitation, firewall, attacks, trigger, urgent, inventory, patch.

Daily Cyber News: Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack

Patient care was disrupted when a cyberattack hit the University of New Mexico Health Sciences Center. Ambulances were diverted, appointments across more than 30 clinics were canceled, and health sciences classes were called off. Hospitals later reopened, with systems and services returning in phases.

Key context: The disruption temporarily removed normal access to the emergency department at New Mexico’s only Level 1 trauma center.

Additional detail: The broader lesson is that a healthcare cyber incident can quickly become a regional safety and capacity problem.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, New Mexico, Cyberattack, disrupts, University, Mexico, hospitals, extortion.