A Cascade of Critical Vulnerabilities Hits Global Infrastructure

The crisis began when critical vulnerabilities in the PHP programming language triggered government website outages worldwide. The U.S. National Security Agency issued an emergency directive, urging organizations to update their systems or pull them offline immediately. Simultaneously, Node.js disclosed four high-severity flaws, including a remote code execution bug and defects that allow attackers to bypass vital server identity checks.

Further complicating the cleanup, the open-source proxy LiteLLM suffered a supply chain attack. Hackers injected an information stealer and a remote access trojan into the Python Package Index, Docker Hub, and GitHub Container Registry, targeting cloud credentials and passwords. In a separate incident, the Indian certificate authority eMudhra reported its private keys were compromised, creating a risk of widespread website impersonation.

Industry experts characterize the scale of these combined incidents as surpassing the historic Heartbleed vulnerability. These events follow a series of recent breaches, including attacks on TiDB Cloud, exploitation of the Plex2Shell flaws, and a zero-day vulnerability in BeyondTrust’s Remote Support product. While these incidents are technically distinct, their simultaneous arrival exposes the growing fragility of the software supply chain in an era where AI-driven exploitation is accelerating the pace of cyberattacks.