Black October for security: PHP2Shell, GitLab, Node.js among 12+ projects hit in one week
basedjensen · x · 2026-10-22
A viral list by @DevMuzzammil dubbed mid-October "Black October" for security breaches:
- Oct 21: PHP2Shell, Railway, Node.js, LiteLLM, GitLab, SBI, eMudhra
- Oct 20: Plex2Shell, SiteGuard, Siemens
- Oct 19: OVHcloud CLI
- Oct 17: Opencode
Up to seven projects were disclosed in a single day, spanning developer toolchains, cloud infrastructure and enterprise services, prompting calls for a consolidated tracking list.
More from Safety
- Banks brace for AI worst-case scenarios as rapid AI progress becomes a security nightmare — kimmonismus · 2026-10-22
- Your unpublished ideas in chatbots could leak—experts on how to reduce the risk — _akpiper · 2026-10-22
- AI cyber offense vs defense is just the same old arms race, says security pro — ziv_ravid · 2026-10-22
- Open models will be the central pillar of AI cyber defense, argues security thread on PHP bugs — ziv_ravid · 2026-10-22
- Axios scoop: US banks detect unauthorized AI agents inside customer accounts — daniel_mac8 · 2026-10-22
- Phil Koopman's Keynote: Agentic AI Trust Is Won or Lost at the Edge Cases — DavidLinthicum · 2026-10-22