CloudSEK warns that two malicious LiteLLM releases on PyPI, live for only 40 minutes in March, may have exposed more than 2,100 organizations to credential theft.
The massive patch bundle, part of the company's August Patch Tuesday release, also includes fixes for two other flaws that were publicly disclosed before today.
A security researcher has released a proof-of-concept (PoC) exploit for a new Microsoft zero-day vulnerability dubbed ShieldBreak, claiming it fully bypasses a recent patch for a privilege escalation flaw in Microsoft Defender.
President Donald Trump’s executive order on Monday, which seeks to overhaul federal childhood vaccine policy and split the combined MMR vaccine into separate shots, has drawn immediate and sharp condemnation from public health groups, medical organizations, and now the pharmaceutical industry.