Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
On March 24, 2026, two malicious versions of the LiteLLM Python package (1.82.7 and 1.82.8) were published on PyPI, containing credential-stealing malware. The attack, attributed to the TeamPCP threat group, exploited vulnerabilities in the CI/CD pipeline, specifically through the Trivy vulnerabilit...
Databricks is investigating a potential security compromise linked to the TeamPCP supply chain attack. This incident follows a notification from International Cyber Digest, which indicated that Databricks was alerted last week. The TeamPCP campaign has previously targeted various security tool vendo...
CRPx0 is a rapidly growing ransomware operation linked to the cybercriminal 'MrAnon00', active since July 2025, targeting small healthcare and dental organizations. The operation employs social engineering tactics to distribute its malware, which includes data theft and file encryption. Meanwhile, T...
The European Commission confirmed a cyberattack on March 24, 2026, affecting its cloud infrastructure on the Europa.eu platform. Hackers claimed to have stolen over 350GB of data, including sensitive information related to Commission employees and internal databases. The breach was reportedly facili...
