Installed LiteLLM 1.107.0 Comes Offline; a Patch Is Not Enough

Put to the panel in full; the board above records what the debate produced.

• PHP - PHP 8.5 before 8.5.12 - exploited vulnerability (opens in new tab)
  for Threat HunterIn the session →

  The cited prior items concern unrelated PAN-OS, Apple, and other exploit campaigns; token overlap is not substantive coverage. Active exploitation of a critical PHP flaw creates a distinct, urgent operator issue.

• LiteLLM - LiteLLM 1.107.0 packages and images - supply chain compromise (opens in new tab)
  ↻ follow-upfor Supply Chain AnalystIn the session →

  LiteLLM compromise and credential rotation were covered, but malicious 1.107.0 packages/images introduce a distinct supply-chain exposure path and change inventory, rebuild, and secret-rotation requirements.

• State Bank of India - customer records - data exposure (opens in new tab)
  for Industry ImpactIn the session →

  No prior item covers SBI or this incident; the cited matches are unrelated exposures. A major bank probing customer-record exposure and resulting fraud risk is a distinct, high-impact event warranting fresh scrutiny.

• Unnamed attackers - telecommunications voice authentication - AI-cloned voice SIM-swap attack (opens in new tab)
  for AI SecurityIn the session →

  Prior sessions covered executive-impersonation payment fraud. This is a distinct control failure: cloned speech defeating telecom voice authentication to enable SIM swapping, with government/regulatory implications and different operator actions.

The panel noted these without opening a full debate — the one-line reason says why they rank below the orders.

• Signal - RingRTC before 2.72.0 - patched vulnerability (opens in new tab)
  for Defense ArchitectVulnerability advisory

  Prior items do not cover RingRTC or persistent microphone/camera access. This is a distinct, critical privacy flaw with a clear fixed version and immediate endpoint-upgrade implications.

• Domestic and foreign influence actors - Indian voters - 2027 election deepfake threat (opens in new tab)
  for GeopoliticalGeopolitical cyber

  Prior coverage only briefly addressed Kenya. The India-specific agency warning, claimed scale of 150 videos daily, domestic and foreign actors, and 2027 election scope materially reframe the operational and policy risk.

• APT28 - NATO member-state shipbuilder - malware campaign (opens in new tab)
  ↻ follow-upfor Intel AnalystThreat actor operations

  APT28’s NATO defense campaign was deeply covered twice, but the identified member-state shipbuilder and reported government confirmation expand the known victim and critical-infrastructure scope.

• Global ransomware groups - Q3 2026 victims - ransomware activity trends (opens in new tab)
  for Threat HunterRansomware / extortion

  Prior Q3 coverage was only a quick claim-count caveat. Rapid7’s incident-based view adds exploitation within three days plus ransomware victim/scope trends, potentially changing patch-priority assumptions and giving the topic fresh operational value.

• SafePay ransomware - internet-facing systems - ransomware breach (opens in new tab)

  Yesterday’s roundtable already led with the official CISA advisory, 600+ victims, backup destruction, containment, and recovery implications. This secondary report appears to restate that advisory without a new scope, IOC, attribution, or action change.

• INC and The Gentlemen affiliates - exposed ransomware infrastructure - malware campaign (opens in new tab)

  Yesterday’s discussion already covered the exposed INC/The Gentlemen infrastructure, 62 victims, FortiClient EMS exploitation, AI use, and evidence caveats. This item shows no newly confirmed victims, attribution, IOCs, or defensive change.

• eMudhra - intermediate CA certificates - supply chain compromise (opens in new tab)

  Yesterday’s discussion covered the eight exposed intermediate-CA keys, ecosystem distrust actions, lack of confirmed abuse, review needs, and outage risk. This candidate states no distinct new scope, abuse, IOC, or operator action.

• GlassWorm - OVHcloud command-line tool releases - supply chain compromise (opens in new tab)

  The compromise, affected CLI versions, secret-theft risk, GlassWorm linkage, and response sequence were covered in depth yesterday. This item adds no concrete new victims, IOCs, remediation, attribution, or operational impact.

• French supermarkets - refrigeration controllers - supply chain compromise (opens in new tab)

  The campaign, controller exposure, safety impacts, uncertain exploit linkage, and containment sequence were covered repeatedly through yesterday. This vendor commentary offers no concrete new attribution, scope, IOC, patch, or regulatory outcome.

• Ransomware groups - PAN-OS GlobalProtect portals and gateways - exploited vulnerability (opens in new tab)

  The same CVE’s active ransomware exploitation was covered yesterday from Unit 42, while PAN-OS response basics were already covered deeply. This secondary report supplies no concrete new victims, IOCs, deadlines, or remediation changes.

• PHP2Shell vulnerabilities - PHP 8.5 before 8.5.12 - patched vulnerability (opens in new tab)

  Prior items are unrelated patch stories; PHP2Shell has not received substantive coverage. A critical PHP runtime flaw with a fixed release is broadly actionable, though exploitability and government-action claims need primary-source validation.

• PHP - PHP web installations - exploited vulnerability (opens in new tab)

  Prior items concern unrelated PAN-OS, Nextcloud, Zimbra, and NetScaler flaws. Active exploitation of a critical PHP vulnerability and advice to take unpatched installations offline create a distinct, urgent operator decision.

Reporting the panel read and judged overstated, or moved to a lower priority, with the claim quoted.

• Judged overstated

  The board should not use SafePay’s “at least 600 victims” as a proxy for its exposure.

  re: SafePay ransomware - internet-facing systems - ransomware breach

• Judged overstated

  A public GitHub repository names CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656 and includes a detection directory; that supports public technical availability, but by itself does not establish successful compromise of a particular server.

  re: Plex2Shell - Plex Media Server before 1.43.3.10861 - exploited vulnerability

• Verify at lower priority

  I assign only low confidence that public evidence proves Russian-state tasking for this specific operation.

  re: APT28 - NATO member-state shipbuilder - malware campaign