Weekly Cybersecurity Threat Summary: Critical Vulnerabilities and Incidents Across Multiple Platforms
Multiple critical flaws and security incidents reported including PHP deserialization, GitLab RCE, eMudhra certificate compromise, and hijacked Tor relays
Key Takeaways
- Multiple critical vulnerabilities and security incidents reported across PHP, GitLab, Linux, eMudhra, Node.js, LiteLLM, and Tor platforms this week
- Active exploitation reported for PHP deserialization flaw and GitLab RCE vulnerability
- Compromised eMudhra certificates pose man-in-the-middle attack risks
Related Security News
CISA and Canadian Cyber Centre Release Guidance on Managing AI Token Consumption
CISA, the Canadian Centre for Cyber Security, and partners have released joint guidance titled 'Managing AI Token Consumption for Operational Resilience.' The advisory helps organizations understand and manage token usage when adopting third-party super intelligence (SI) services. Unmanaged token consumption can lead to rising and unpredictable costs, reduced service availability, degraded performance, token exhaustion, and denial-of-tokens or denial-of-wallet attacks. The guidance outlines practical steps for prioritizing token allocation, designing efficient workflows, improving user prompting practices, leveraging caching and reusable context, optimizing data before submission, and monitoring consumption over time. Critical infrastructure operators are encouraged to identify mission-critical SI dependencies and plan for reduced availability during incidents or high-demand periods.
