'Black October': 48 hours of record cyberattacks hit PHP, GitLab, LiteLLM and California schools
AryHHAry · x · 2026-10-24
A widely shared roundup calls the last 48 hours "Black October" — a string of incidents that would each rank among a normal year's biggest:
- PHP2Shell: flaw in software behind 70% of websites; governments took sites offline.
- eMudhra: master keys used for website identity verification cracked, one reportedly ranked #4.
- California: data on every public school student since 2023 stolen, including disability status.
- Railway: customer secret keys stolen from a hosting platform used by millions of devs; Zeabur breached 321,810 accounts and is shutting down.
- LiteLLM: an AI tool downloaded 3.4M times a day laced with a password stealer.
- GitLab: maximum-severity flaw affecting every version since 2014.
- Criminals have also begun using an AI hacking tool.
More from Safety
- "Prompted, not evil": what OpenAI's viral "escaping AI" story actually says — AIFlow_ML · 2026-10-24
- Musk says no GB300s or even H100s to rent; analyst calls China chip export policy absurd — Gregory_C_Allen · 2026-10-24
- New paper: LLM simulators can evaluate AI control protocols without real deployments — jammastergirish · 2026-10-24
- OpenAI red team finds critical Brotli RCE (CVE-2026-11149) hitting Node.js, Bun, Envoy — moyix · 2026-10-24
- Video: Misaligned AI Breaks Through a Stack of Control Measures — JacquesThibs · 2026-10-24
- Can an airgapped GPU leak data via heat? AI security debate says implausible — jd_pressman · 2026-10-24