Four cyber events in 24 hours: GitLab CVSS 10 RCE, Railway secrets exposure, HTTP/3 DoS flaws
josh_bickett · x · 2026-10-22
Developer Josh Bickett rounds up a cluster of cyber developments within 24 hours:
- GitLab: a CVSS 10.0 remote code execution (RCE) flaw disclosed
- Railway: potential secrets exposure on the cloud platform
- HTTP/3: DoS vulnerabilities found in major libraries
- North Korea: 40+ websites disrupted
The author notes there is no confirmed link between the incidents, but the timing is wild. The post also references the previously disclosed PHP2Shell chain, adding up to a rough stretch for AI/dev infrastructure security.
More from Safety
- Defense must run at machine speed: agents patch, engineers judge — saranormous · 2026-10-22
- CVEs jumped from ~4k to ~15k a month since April, and the security treadmill is breaking — saranormous · 2026-10-22
- US government reportedly pressed Anthropic to slow mythos cyber rollout — bookwormengr · 2026-10-22
- OpenAI restricts Daybreak access for security researchers, critics call it a mistake — andersonbcdefg · 2026-10-22
- Security engineers rush to secure Drupal and PHP apps amid exploit wave — unixterminal · 2026-10-22
- Internet Archive fends off PHP attacks overnight, using Claude to patch old code — kingslyj · 2026-10-22