AINewsnow

Black October: what one week of PHP2Shell, LiteLLM and eMudhra says about who scans your code

This story is from 2026-10-26. It is preserved in the archive; the latest stories are on the live feed.

Between Friday 17 October and Friday 24 October 2026, the PHP interpreter shipped emergency patches for two pre-auth RCEs found with frontier AI models. The fix date was forced forward by a leaked embargo. A popular AI proxy shipped a backdoored release to PyPI and Docker Hub, and an Indian certifi…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-26 16:14 · DEV Community — AI
    Black October: what one week of PHP2Shell, LiteLLM and eMudhra says about who scans your code

More stories

  1. Meta plans $95bn stock offering to bankroll AI expansion — Financial Times AI
  2. Anthropic IPO: S-1 Filing Offers First Look at Claude Maker’s Finances — Bloomberg AI
  3. Microsoft offers buyouts to ~60K workers at VP level and below across teams in the US, Canada, India, and the UK; its headcount at the end of June was 223K (Bloomberg) — Techmeme
  4. To make AI morally good, tech companies turn to religion. Some say it's not so simple — ABC News Technology
  5. Groundhog Day for AI agents: Prompt caching patterns for using OpenAI models on Amazon Bedrock — AWS Machine Learning Blog
  6. Build agentic retrieval on a Managed Amazon Bedrock Knowledge Base with CDK — AWS Machine Learning Blog
  7. Anthropic's Claude bypassed a paywall to access Georgia voter data without authorization — Axios AI+
  8. Can AI automate Epoch? — Epoch AI

Get the daily brief of stories like this at 6:30 every morning →