The internet broke today: eMudhra '4' key, PHP 9.2 RCE, GitLab 10.0 and 7 more security incidents in one day
RSync25 · x · 2026-10-22
A viral security alert rounds up the Oct 21, 2026 incident cascade: eMudhra's 8 compromised intermediate CA keys (one literally '4', 17 months of forgeable certs, 60M+ certs at risk); unauthenticated RCEs in PHP (9.2) and GitLab (10.0/10); Node.js Brotli RCE + TLS bypass with 10 CVEs patched; Railway breach exposing env variables; OpenCode breach leaking OpenAI/Anthropic/Google API keys; LiteLLM PyPI v1.107.0 serving credential-stealing malware; Plex2Shell actively exploited per CISA KEV; plus SBI and Rajasthan Police data leaks. The kicker: AI finds the bugs, AI exploits them, humans can't patch fast enough.
More from coding & agent
- Longman Dictionary MCP Server Serves Structured Definitions to AI Agents — modelcontextprotocol · 2026-10-22
- Law professor rethinks Microsoft Copilot after hands-on work inside a major law firm — jkubicki · 2026-10-22
- A complete guide to giving Claude perfect memory with folders, CLAUDE.md and daily logs — evielync · 2026-10-22
- Dev shows off self-built infra stack — HTTP clients, attention kernels, model routers — to quit dependencies — wavefnx · 2026-10-22
- Codex app reportedly ignores model selection, randomly switching to other models — zeeg · 2026-10-22
- Anthropic's /claude-api prompt-audit cuts agent costs 9% and lifts accuracy ~2 points by fixing CLAUDE.md — Arindam_1729 · 2026-10-22