Python closes critical TLS flaw tied to eMudhra keys in update

Python 3.15.2, 3.14.10, 3.13.18, 3.12.16 and 3.11.18 fix a critical vulnerability caused by compromised eMudhra certificates, ...
The Crypto Times

LiteLLM Supply Chain Attack: Malicious v1.107.0 Steals Cloud Credentials and AI API Keys

LiteLLM’s second 2026 supply chain attack exposed cloud credentials, AI API keys and SSH keys through malicious v1.107.0 ...
BankInfoSecurity

Exposed LiteLLM Key Enabled PyPI Supply Chain Attack

An open-source artificial intelligence model gateway allowed a threat actor to gain owner-level access to its entire GitHub ...
ZDNet

Python programming: PyPl is rolling out 2FA for critical projects, giving away 4,000 security keys

PyPI or the Python Package Index is giving away 4,000 Google Titan security keys as part of its move to mandatory two-factor authentication (2FA) for critical projects built in the Python programming ...

The Java, Node.js, Go, and Python certificate issue was one single event. eMudhra's key collapse and the order of this week's updates

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...