Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packages

Weekly security roundup highlighting multiple high-risk items: actively exploited critical RCE vulnerabilities (notably F5 BIG-IP APM and Oracle Identity Manager), supply-chain compromises and malicious PyPI/LiteLLM packages from TeamPCP delivering credential stealers and droppers, GitHub-hosted malware campaigns targeting developers, Trivy and Langflow issues added to CISA’s exploited-vulnerabilities list, arrests tied to infostealer and ransomware activity, plus broader industry advisories on AI agent risks, post-quantum readiness, and tooling updates.