CVE-2026-42208 exploited within 36 hours of disclosure, exposing LiteLLM credentials, risking cloud account compromise.
The China-linked APT GopherWhisper has been using legitimate services and various Go-based backdoors in attacks.