Daily Brief
exploited flaws and supply chain compromise
Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
Arista said attackers are exploiting a zero-day SQL injection flaw in VeloCloud Orchestrator on-prem deployments. The bug can let a user with even read-only access gain operator privileges, so SD-WAN management planes may be exposed to full takeover.
Patch VeloCloud Orchestrator on-prem deployments now and review any read-only accounts for unusual operator-level activity.
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
LiteLLM said its release pipeline was compromised and a malicious package version was published to PyPI and Docker Hub. The payload could steal credentials, secrets and environment variables, making this a direct supply chain risk for users pulling recent builds.
Rebuild from known-good artefacts, rotate any secrets exposed to LiteLLM build or runtime systems, and block unverified package pulls until you have checked your dependency provenance.