27 security incidents in one month: security folks call it 'Black October'
Confident_Salt_8108 · reddit · 2026-10-22
A Reddit roundup lists 27 major security incidents hitting at once, prompting security professionals to dub it "Black October" and warn of possible internet lockdowns. Highlights: PHP2Shell affects software behind 70% of websites (governments took sites offline); eMudhra certificate signing keys cracked; data on every California public school student since 2023 stolen; hosting platforms Railway and Zeabur breached (321,810 accounts, company shutting down); LiteLLM, downloaded 3.4M times daily, poisoned with a password stealer; a 10/10-severity GitLab flaw affecting every version since 2014; three critical NGINX holes; HTTP/3 crashing 7 of 10 tested web servers; FBI warning that SafePay ransomware has hit 600+ critical infrastructure orgs; a Signal bug keeping mic/camera live after hangup; 333 Tor relays hijacked; Medi-Cal (970,000 patients) and State Bank of India breaches; and a new North Korean campaign against South Korea. The attached screenshots show security researchers fearing "AI agent swarms hacking half the internet" and a record CVE drip.
More from AGI Musings
- Meta CTO Bosworth: superintelligence by 2028 will dwarf everything since ChatGPT — DeryaTR_ · 2026-10-22
- Matt Turck: in AI, everyone is competing with everyone — chips, models, clouds and apps all overlap — mattturck · 2026-10-22
- Anthropic researchers publish essay on technological progress and the meaning of work — paulnovosad · 2026-10-22
- ARK's Sam Korus: Tesla Optimus academy and David Silver's super learner converge — skorusARK · 2026-10-22
- Chinese essay: in the AI era, individuality becomes extractable data representation — teortaxesTex · 2026-10-22
- VraserX mocks Dario Amodei: those warning about AI want to decide who gets access — VraserX · 2026-10-22