Cyber Weekly Recap — Trivy, Cisco RCE, European Commission, LiteLLM, Hasbro
This week was particularly busy on the cybersecurity front.
👉 Here are the 5 things you cannot miss — with concrete actions for each.
📰 The 5 Incidents of the Week
Trivy Compromised — CI/CD at Risk
Supply Chain / Tool Compromise
- Suspected compromise of Trivy, widely used in CI/CD pipelines
- Risk of token, SSH key and cloud credential exposure
- Potential impact on all pipelines using the tool
Cisco — CVE-2026-20131 Actively Exploited
Remote Code Execution / Ransomware Campaigns
- Critical vulnerability on Cisco FMC exploited in ransomware campaigns
- Code execution with elevated privileges
- Active exploitation confirmed — immediate risk if unpatched
European Commission Compromised
Institutional Intrusion / State Attribution
- Major incident affecting European institutions
- Attribution mentioned: TeamPCP group
- Reminder: even the best-protected organisations remain exposed
LiteLLM — The AI Ecosystem Hit
Supply Chain / AI Ecosystem
- Confirmed incident linked to LiteLLM (AI infrastructure)
- Potential cascading impact on multiple services and integrations
- New evidence that supply chain attacks are becoming systemic
Hasbro — Critical Systems Offline
IT Incident / Probable Ransomware
- Critical system outage following a cyber incident
- Cause not officially confirmed
- Probable hypothesis: ransomware or major infrastructure incident
📈 Trend of the Week
Explosion of Supply Chain Attacks
Two major incidents within days — Trivy and LiteLLM. Attackers are changing strategy:
« Why target a company… when you can compromise the tool it uses? »
- →Trivy → security scanning tools in CI/CD
- →LiteLLM → critical AI infrastructure
- →A clear trend: DevSecOps tools themselves are becoming targets
🎯 Watch Next Week
- ⚠️Trivy-related CVE — fix expected, apply as soon as published
- 🌐Chromium vulnerabilities being patched
- 🕵️TeamPCP group activity across Europe
🧠 The Bottom Line
The software supply chain has become a priority attack vector.
Two major incidents in a single week are enough to confirm the trend.
✔ Scanning your dependencies (SCA) is no longer enough
✔ The integrity of the tools themselves must be verified
✔ Segmenting CI/CD access is now critical
Have you strengthened your controls on the software supply chain in recent months? What tools or processes have you put in place?
Need personalised guidance?
NagaShield Security helps you implement these measures concretely, tailored to your organisation and budget.
Request a free diagnostic