LiteLLM Supply Chain Attack: Credential Stealer in PyPI and DockerAttackers hijacked three LiteLLM engineer GitHub accounts with stolen CLI OAuth tokens, pushed a credential-stealing release (1.107.0) to PyPI and Docker Hub on 21 October 2026, and Wiz observed stole4h ago · 7 min read404-founders.com
Ivanti Connect Secure CVE-2026-104935: Auth Bypass Zero-DayThe patch dropped October 13. Exploitation didn't wait for it. Volexity had been documenting active UTA0576 activity through a zero-day authentication bypass before Ivanti published anything - an unau4h ago · 7 min read404-founders.com
Plex2Shell CVE-2026-96652: Unauthenticated RCE ActiveAttackers began exploiting the Plex2Shell chain the day after Zach Main published the write-up and proof-of-concept on October 16, and a BoredHackerBlog honeypot caught an XMRig miner and a proxy prog4h ago · 7 min read404-founders.com
Three Zero-Days in Four Months: VeloCloud Orchestrator and the Cost of an Exposed Control PlaneArista published Security Advisory 0199 on 22 October 2026, confirming active exploitation of CVE-2026-114625, a SQL injection in VeloCloud Orchestrator with a CVSS 3.1 score of 9.9. It is the third a4h ago · 8 min read404-founders.com
AfD Party Email Breach (No CVE)The Alternative für Deutschland (AfD) party confirmed a breach of its hosting provider, resulting in the leak of 281 GB of internal emails, including 421,179 messages and over 100,000 files. The leak 16h ago · 2 min read404-founders.com
