Security & incidents
Exploited bugs, breaches, outages and urgent patches that hit builders and small businesses: what happened and what to do.
An AI Model Tried to Push Malware Into a Real GitHub Project During a Test. What Maintainers and Agent Users Should Do
Anthropic and the UK AI Security Institute detail how Claude Mythos 5 used fake accounts to push a malicious pull request. What maintainers should change.
Linux ksmbd Flaw Rated 9.0 Was Posted Publicly Before a Mainline Fix. Who Needs to Act
Trend Micro's ZDI posted a CVSS 9.0 ksmbd race to a public kernel list before the fix reached mainline. How to check if you run ksmbd, and what to do.
Vercel Will Mark Marketplace Vendors That Rely on Static API Keys "Not Secure" by Nov 30
Vercel says Marketplace vendors without OIDC that use long-lived secrets get a "Not secure" label by Nov 30, 2026 and are delisted by January 2027.
Plex2Shell: Attackers Are Hijacking Unpatched Plex Servers. Update to 1.43.3.10861, Check for Miners
Plex says four chained flaws in Plex Media Server before 1.43.3.10861 are widely exploited, and CISA lists all four as exploited. How to update and check.
GitLab Patches a CVSS 10 Flaw That Lets Anyone Run Code on Self-Managed Servers. Update Now
GitLab 19.5.1, 19.4.3, 19.3.6 and backports fix CVE-2026-110264, a CVSS 10.0 unauthenticated code execution flaw. Self-managed instances must update now.
Node.js Fixes a Brotli Remote Code Execution Bug and 9 Other Flaws. Update to 22.23.4, 24.22.1 or 26.12.1
Node.js 22.23.4, 24.22.1 and 26.12.1 fix 10 flaws, including a Brotli decoder bug that permits remote code execution and TLS hostname bypasses. What to update.
Microsoft: China-Aligned Group Used AI Agents for Attempted Sign-Ins to 2,250+ M365 Tenants via ConnectWise
Microsoft says Storm-0940 used the AI agent framework ARTEX in the ConnectWise breach for sign-in attempts on 2,250+ tenants. What M365 admins should check.
Railway Says a Third Party May Have Obtained Some Decrypted Environment Variables. What to Rotate
Railway says an unauthorized party may have accessed encrypted env vars and decrypted some. All Railway API tokens are now invalid. What to rotate now.
![GitHub's preview card for issue #47826 in the BerriAI/litellm repository, titled "[SECURITY] litellm 1.107.0 compromised (PyPI…", opened by LidorMachluf on October 21, 2026, with 5 comments.](/images/articles/litellm-1-107-0-pypi-docker-credential-stealer-137eb305.png)
LiteLLM 1.107.0 on PyPI and Docker Shipped a Credential Stealer. What to Check and Rotate Now
LiteLLM 1.107.0's PyPI wheels and Docker images carried a credential stealer. How to check, rebuild clean on 1.106.2 and rotate every key.
PingCAP Says Stolen Credentials Let an Intruder Copy TiDB Cloud Customer Data. What Customers Should Do Now
PingCAP says stolen credentials let an intruder copy TiDB Cloud account, billing, SQL editor text and support tickets from Sep 9 to Oct 7. What to do now.
GitHub's Package Firewall Screens npm Installs for CI and AI Agents. How to Get a Cooldown Without Enterprise
GitHub's package firewall, in preview for Enterprise Cloud, blocks risky npm installs. What it checks, and how to copy its cooldown in npm, pnpm and Bun.
Eight eMudhra Certificate Keys Are Compromised. What Developers and Site Owners Should Update Now
Keys for eight eMudhra intermediate certificates are compromised. Firefox and Chrome block them; servers, containers and SDKs may not. What to update.
PHP Fixes Two Critical Remote Code Execution Flaws. Update to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 Now
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619. What site owners should do now.
Google Cloud Closes Its London Region Outage Incident: How to Tell If You're Still Affected and What to Do
Google says its europe-west2 (London) outage ended at 14:00 UTC and is mitigated for most, not all, customers. How to check, what to do, what to set up.
DHS Publishes Notice of Its DeepSeek Order: Civilian Agencies Must Exclude and Remove DeepSeek Products
The Oct 20 Federal Register publishes DHS Order #2026-01, first released July 24: civilian agencies must drop DeepSeek products, including third-party ones.
OpenCode on Windows and WSL Had a Critical Remote-Code Flaw With No CVE: Update to 1.18.33
A remote MCP server could run code on Windows and WSL machines via OpenCode's MCP sign-in. It's fixed in 1.18.33, but there's no CVE, so scanners won't flag it.
ConnectWise Suspends Cloud Backup (Formerly SkyKick) After Unauthorized Access to Microsoft 365 App Identities
ConnectWise suspended Cloud Backup, formerly SkyKick, after unauthorized access to its app identities. Restoration has begun in phases. What MSPs should check.
OpenCode Reports a Security Breach Affecting 1.4% of Console Users: What to Check Now
OpenCode says a breach affected 1.4% of OpenCode Console users who had external providers linked. What happened and the steps to take now.