Daily · 2026-06-09
🛡️ Check Point VPN CISA Mandate, LiteLLM RCE Exploited, Chrome 5th Zero-Day, Shai-Hulud PyPI, NSO Contempt
CISA orders emergency Check Point VPN patching as Qilin ransomware exploits CVE-2026-50751. LiteLLM RCE chain (CVE-2026-42271 + CVE-2026-48710, CVSS 10.0) under active exploitation as AI supply chain threats intensify. Google patches 5th Chrome zero-day; Gogs critical RCE patched with 2,300+ instances exposed. Shai-Hulud PyPI campaign expands to bioinformatics tooling. Meta files contempt against NSO Group for renewed spyware attacks.
The BadHost vulnerability is the day's defining story because a framework bug is being chained into mass AI-infrastructure compromise. CVE-2026-48710, a Host header validation bypass in Starlette, is combined with command injection in LiteLLM's MCP test endpoints to reach unauthenticated remote code execution on AI gateway proxies, the choke point where model API keys and provider credentials sit. The chain is confirmed exploited, and the same header handling flaw affects FastAPI, vLLM, and MCP servers broadly. Upgrading LiteLLM past 1.83.6 and Starlette past 1.0.0 is the emergency move.
The Check Point VPN zero-day is the other urgent item: CVE-2026-50751 is an authentication bypass in IKEv1 deployments, confirmed exploited by Qilin ransomware affiliates and on CISA's KEV with a June 11 federal deadline. The supply chain picture darkens in parallel: Shai-Hulud trojanized 19 bioinformatics packages using .pth startup hooks that fire in any Python process, and Gogs patched an argument injection giving any authenticated user code execution, with open registration enabled by default and more than 2,300 instances exposed.
Watchlist: patch Check Point VPN and Gogs, rotate secrets on any host that installed affected PyPI packages, restrict Teams federation after Unit 42 tied APT29 to collaboration-tool phishing, and treat AI-themed lures as the dominant social engineering surface Microsoft documented at scale.