News
Major security incidents reported: Capcom breach, GitLab patches, LiteLLM supply‑chain attack
Capcom disclosed a data breach of its Capcom ID service, exposing contact addresses, account creation dates, login timestamps and IPs for 11.7 million accounts, with a smaller subset leaking additional personal data. GitLab released critical patches for 12 vulnerabilities, including an unauthenticated code‑execution flaw (CVE‑2026‑110264) in its regex compiler and an LDAP takeover issue, affecting versions 18.11.13 through 19.5.1. LiteLLM’s release process was compromised; version 1.107.0 on PyPI and Docker contained an infostealer and remote‑access trojan that harvested cloud, SSH, GPG and shell‑history secrets before being removed. Users of the affected LiteLLM package are advised to rotate credentials and monitor for indicators of compromise.