48 hours of chaos: PHP, GitLab CVSS 10.0, Chrome's 353 fixes — audit your stack now
reach_vb · x · 2026-10-23
A dense 48-hour stretch of security disclosures: unauthenticated PHP RCE, a CVSS 10.0 GitLab RCE, Node.js Brotli decoder RCE plus 9 other flaws, Chrome's 353 security fixes, a Signal bug preventing calls from fully ending, compromised eMudhra CA keys, Oracle's 1,295 patches, Fortinet critical/high fixes, and 176 Atlassian vulnerability entries — on top of last week's Linux VM escape.
The author's practical advice: ask Codex or your coding agent to audit your code, dependencies and infrastructure for exposure, and set up automations that regularly check newly disclosed vulnerabilities and flag what needs patching.
More from coding & agent
- Testing Hermes Agent with n8n: Letting Agents Execute Real Automation Workflows — techlatest_net · 2026-10-23
- OpenAI: Keep MCP Server Instructions Under ~1,000 Characters or ChatGPT May Truncate Them — bibryam · 2026-10-23
- Only ~56% of MCP Servers Provide Instructions, OpenAI Data Shows — bibryam · 2026-10-23
- OpenAI: Don't Hide MCP Tools Behind listCommand/executeCommand Dispatchers — bibryam · 2026-10-23
- Resend logs 1M monthly MCP calls as OpenAI frames MCP as a distribution channel — bibryam · 2026-10-23
- MCP Elicitation lands in Claude: servers can ask users questions mid-action — bibryam · 2026-10-23