ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

This weekly cybersecurity roundup covers a wide range of critical security incidents and vulnerabilities. Highlights include critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. Additional issues include AI secrets leakage, source code theft targeting PingCAP, a Signal application hang-up flaw, and a Laravel authentication bypass vulnerability. The article also references stolen passwords and other exposed credentials. In total, the roundup covers 25 or more distinct cybersecurity threats and incidents from the week, spanning multiple platforms, services, and vulnerability types.