Nightmare day for cybersecurity: PHP RCEs, LiteLLM backdoor, CA key crack
LadyAshBorg · x · 2026-10-22
Mudit Gupta rounds up multiple major security incidents hitting the same day, urging production teams to patch now:
- PHP: two critical unauthenticated RCEs, already actively exploited.
- LiteLLM: v1.107.0 on PyPI and Docker is backdoored, stealing cloud, SSH, and AI credentials — pin 1.106.2 and rotate secrets.
- eMudhra: a certificate authority's keys were crackable; update browsers, systems, and trust stores.
- Node.js / Next.js / React: security releases covering Brotli RCE, TLS bypasses, and two critical Next.js RCEs.
- TiDB Cloud: PingCAP breached via stolen credentials, with customer data exfiltrated.
Related event: Black October: PHP, GitLab, Node.js Hit by Wave of Critical Security Flaws(9 posts)→
More from coding & agent
- One week of vibe coding, 30,708 players in month one: Dust 2 DM game's Spawn stats — TAbrodi · 2026-10-22
- Security patch ships with 1,858× speedup: 3,000-scene queries drop from 2s to 1.13ms — DanielLockyer · 2026-10-22
- Codiff v1.18 ships faster startup, prettier markdown diffs and a new app icon — cnakazawa · 2026-10-22
- SGLang-TorchTPU launches with Google and Meta, hitting 770 tok/s decode on TPU — BanghuaZ · 2026-10-22
- New paper: can first-price auctions efficiently allocate queries among strategic AI agents? — _onionesque · 2026-10-22
- diagram-design: an agent skill that turns prompts into editorial HTML+SVG diagrams, 59.6k stars — tom_doerr · 2026-10-22