PHP2Shell Flaws, LiteLLM Compromise & BeyondTrust Zero-Day

Two critical flaws in PHP, the language behind a huge share of the web, leaked before their patches shipped, drew exploitation attempts before and within hours of the fix, and pushed Australian government websites offline as a precaution. A poisoned release of LiteLLM, a popular AI gateway library, sat on PyPI for under two hours, long enough to try to steal cloud and AI credentials from anyone who installed it. A China-linked group also used a BeyondTrust Remote Support zero-day for roughly seven weeks before disclosure, eight certificate authority keys turned out to be recoverable by anyone,