'Black October': 27 major breaches and CVEs hit in days, from PHP to LiteLLM to GitLab
Confident_Salt_8108 · reddit · 2026-10-22
A Reddit roundup catalogs an unusual cluster of major security incidents, dubbed "Black October" by some cybersecurity folks who fear imminent internet lockdowns. X posts claim 10 CVEs dropped in 24 hours, any one of which would've been among the worst in recent years, with speculation that AI agent swarms are mass-exploiting flaws.
Highlights:
- PHP2Shell: flaw in software behind 70% of websites; governments took sites offline
- LiteLLM: AI tool downloaded 3.4M times/day poisoned with a password stealer
- GitLab: 10/10 severity hole in every version since 2014; NGINX: 3 critical flaws in software running 1/3 of websites; one HTTP/3 connection crashes 7 of 10 server types
- Meta Muse: Meta's AI agent exposed users' personal and business secrets
- Cairn: criminals used an AI hacking tool to breach 100+ companies
- Plus eMudhra CA keys cracked, California student data stolen, Railway and Zeabur (321,810 accounts, company shutting down), Signal mic/camera bug, SafePay ransomware hitting 600+ critical-infrastructure orgs, State Bank of India breach, 333 Tor relays hijacked, and more — 27 incidents total
More from Safety
- 13 engineers found 2 years' worth of severe bugs in a quarter with 5 simple LLM prompts — dr_cintas · 2026-10-22
- DeepSeek agent swarm reportedly patching vulnerable PHP boxes before attackers — burny_tech · 2026-10-22
- Banks brace for AI worst-case scenarios as rapid AI progress becomes a security nightmare — kimmonismus · 2026-10-22
- Your unpublished ideas in chatbots could leak—experts on how to reduce the risk — _akpiper · 2026-10-22
- AI cyber offense vs defense is just the same old arms race, says security pro — ziv_ravid · 2026-10-22
- Open models will be the central pillar of AI cyber defense, argues security thread on PHP bugs — ziv_ravid · 2026-10-22