🚨 LiteLLM 1.107.0 compromised in a supply chain attack.

Malicious PyPI packages and Docker images delivered a credential stealer and backdoor.

⚠️ The malware runs at Python startup, targeting cloud credentials, private keys, and AI tool credentials.

🔗 Full story: https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html

🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.

CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.

Read - https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html

🚨 China-linked hackers used ARTEX AI agents to abuse stolen ConnectWise app credentials and gain access to customer cloud environments.

Microsoft ties Storm-0940 to the ConnectWise Cloud Backup supply-chain compromise.

Details ↓ https://thehackernews.com/2026/10/china-linked-hackers-use-artex-ai.html

‼️ ALERT - Someone tried to exploit #PHP2Shell 4 days before the vulnerabilities were publicly disclosed.

Amazon caught the October 17 attempt. More exploit attempts followed the patch release.

Who had the exploit details early, and how?

Full story ↓ https://thehackernews.com/2026/10/someone-tried-to-exploit-php2shell-4.html

‼️ A single HTTP/3 connection can crash vulnerable web servers. No login required.

Newly disclosed QPACK flaws trigger up to 4,000× memory amplification in tests, exhausting server resources.

→ PoC is public
→ 7 implementations affected
→ Still unpatched: Bun, aioquic, h3

Full details ↓ https://thehackernews.com/2026/10/new-qpack-flaws-can-crash-http3-servers.html

🚨 Node.js patches 10 security flaws, including a high-severity Brotli decoder bug that could allow RCE when apps decompress attacker-controlled data.

Patches are out for versions 22.x, 24.x, and 26.x.

Update Now ↓ https://thehackernews.com/2026/10/nodejs-brotli-decoder-bug-could-allow.html

⚠️ LiteLLM’s release pipeline was hijacked.

Malicious v1.107.0 packages shipped a credential stealer and backdoor. Attackers later tested stolen AWS credentials.

LiteLLM suspects GitHub OAuth tokens were taken from logs on its exposed internal deployment.

Read ↓ https://thehackernews.com/2026/10/litellm-suspects-github-token-leak-in.html

🚨 OpenCode flaw lets malicious MCP servers execute code on Windows and WSL when developers initiate sign-in.

Fixed in v1.18.33, but there's no CVE or security advisory. Vulnerability scanners won't flag affected versions.

What developers need to know: https://thehackernews.com/2026/10/opencode-flaw-lets-malicious-mcp.html

According to IBM’s recent Cost of a Data Breach Report, 43% of breached organizations reported a shadow AI incident in 2026, up from 20% the year before.

With shadow AI spreading faster than anyone can track, it’s easy to miss when an employee builds an agent with too-broad access to company data, or a developer’s coding tool leaks production secrets.

With NordLayer AI Scout, take control of your network: discover every AI tool in use, see what was asked, by whom, and where.

See what’s running in the gaps of your approved AI list 👉 https://thn.news/shadow-ai-tools

🛑 Railway reports a security incident involving systems storing customer environment variables.

An unauthorized party may have accessed encrypted secrets and, in some cases, decrypted contents.

Railway has invalidated API tokens and urges users to rotate credentials.

Details → https://thehackernews.com/2026/10/railway-says-intruder-may-have-accessed.html

⚡ INTERPOL arrests 1,462 suspects and disrupts 10,909 malicious networks in a major cybercrime crackdown.

21 countries. Over $105 million recovered. More than $385 million in losses linked to criminal activity.

Inside Operation Serengeti III ↓ https://thehackernews.com/2026/10/interpol-arrests-1462-suspects-disrupts.html

🔥 Your biggest AI insider threat may already be on an employee's laptop.

AI agents can access API keys, passwords, and internal systems without proper oversight.

Join Bitdefender's webinar to learn how to detect and govern shadow AI.

Save your seat → https://thehackernews.com/2026/10/the-ai-agent-nobody-owns-watch-expert.html

‼️ Meta ordered to pay $25 BILLION.

A New Mexico court found more than 43 million violations tied to Facebook's misleading data privacy promises.


The ruling stems from a lawsuit linked to the Cambridge Analytica scandal.

Full story ↓ https://thehackernews.com/2026/10/meta-ordered-to-pay-25-billion-after.html

‼️ ALERT - Two new unpatched CVSS 9.0 RCE flaws in #Linux's KSMBD SMB server were disclosed on public kernel mailing lists before fixes were ready.

One can be triggered WITHOUT authentication.

Neither has a mainline kernel fix.

Details here ↓ https://thehackernews.com/2026/10/two-cvss-90-linux-ksmbd-rce-flaws.html

🚨 eMudhra is exiting the global SSL/TLS certificate business.

The decision comes just 5 days after a researcher exposed 8 easily guessable CA private keys.

Chrome and Firefox are withdrawing trust in its ECC root, leaving roughly 30,000 certificates needing replacement.

Here's what to do ↓ https://thehackernews.com/2026/10/emudhra-to-exit-global-ssltls-business.html

‼️ Critical VeloCloud SQL injection flaw exploited in the wild.

Tracked as CVE-2026-114625 (CVSS 9.9), the flaw lets even read-only users escalate to full operator privileges.

Arista confirms active attacks.

What admins need to know ↓ https://thehackernews.com/2026/10/arista-warns-of-critical-velocloud-sql.html

‼️ PHP2Shell exploit attempts hit millions as attackers try to deploy Mirai malware. Exposed attacker servers reveal RCE tooling.

No successful compromises confirmed so far.

Inside the payloads, exploit tools, and failed attempts → https://thehackernews.com/2026/10/php2shell-exploit-attempts-hit-millions.html

🛑 ALERT - Node2Shell RCE exploit works on an official Node.js build.

Researchers demonstrated how crafted Brotli data can trigger code execution through vulnerable Node.js applications, without modifying the runtime.

Here's how the exploit works: https://thehackernews.com/2026/10/researchers-demonstrate-node2shell-rce.html

🚨 A malicious API could drain an AI agent's token balance via an x402 SDK flaw.

V12 rated 3 bugs critical:
— No default spending cap
— Solana approvals passed as payments
— Logins signed for other sites

All patched. No advisory, so npm audit & PyPI miss them.

Read more ↓ https://thehackernews.com/2026/10/critical-x402-sdk-flaw-could-let.html

🛑 A filename is enough to trigger OS command execution in Python's widely used Pillow image library.

CVE-2026-112900 abuses how Pillow passes EPS filenames to Ghostscript.

What you need to know ↓ https://thehackernews.com/2026/10/critical-flaw-in-pythons-popular-pillow.html