Daily Brief
Active exploits and supply-chain compromise
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
CISA added critical flaws in Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator to its Known Exploited Vulnerabilities list after reports of active exploitation. This matters because KEV entries usually mean defenders need to prioritise patching and exposure checks quickly.
Check whether Collabora Online CODE Server or Arista VeloCloud Orchestrator are in use, confirm versions, and apply vendor fixes or mitigations immediately.
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
LiteLLM said a master key was accidentally published in a public GitHub repository and was later used to push a malicious package version. It shows how a single leaked secret can lead to token theft and compromise of a release pipeline.
Search repositories and build systems for exposed secrets, revoke any leaked keys, and review GitHub token and package publishing permissions this week.