# RSS **URL:** https://forums.thehomestack.io/c/rss/70.md [Latest](https://forums.thehomestack.io/latest.md) · [Categories](https://forums.thehomestack.io/categories.md) · [Tags](https://forums.thehomestack.io/tags.md) --- ## [About the RSS category](https://forums.thehomestack.io/t/about-the-rss-category/21560)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 11:39pm UTC](https://forums.thehomestack.io/t/about-the-rss-category/21560 "2025-12-18T23:39:13Z")
This category and its sub categories are from RSS pulls that most of the members use on a daily basis. --- ## [LiteLLM release pipeline hacked to distribute info-stealer malware](https://forums.thehomestack.io/t/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/26573)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 7:24pm UTC](https://forums.thehomestack.io/t/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/26573 "2026-10-22T19:24:38Z")
Hackers compromised the LiteLLM project’s PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. \[…\] This is a companion discussion topic for the … --- ## [Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes](https://forums.thehomestack.io/t/two-cvss-9-0-linux-ksmbd-rce-flaws-disclosed-on-public-mailing-lists-before-kernel-fixes/26572)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 6:19pm UTC](https://forums.thehomestack.io/t/two-cvss-9-0-linux-ksmbd-rce-flaws-disclosed-on-public-mailing-lists-before-kernel-fixes/26572 "2026-10-22T18:19:07Z")
Linux servers running KSMBD, the kernel’s built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro’s Zero Day Initiative, with no fix yet in the mainline kernel. One… --- ## [ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More](https://forums.thehomestack.io/t/threatsday-ai-secrets-leak-pingcap-source-theft-signal-hang-up-flaw-laravel-auth-bypass-21-more/26571)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 6:19pm UTC](https://forums.thehomestack.io/t/threatsday-ai-secrets-leak-pingcap-source-theft-signal-hang-up-flaw-laravel-auth-bypass-21-more/26571 "2026-10-22T18:19:07Z")
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked… --- ## [eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable](https://forums.thehomestack.io/t/emudhra-to-exit-global-ssl-tls-business-after-8-intermediate-ca-keys-found-easily-guessable/26570)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 6:19pm UTC](https://forums.thehomestack.io/t/emudhra-to-exit-global-ssl-tls-business-after-8-intermediate-ca-keys-found-easily-guessable/26570 "2026-10-22T18:19:04Z")
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private key… --- ## [Arista patches new VeloCloud Orchestrator zero-day exploited in attacks](https://forums.thehomestack.io/t/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/26569)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 5:19pm UTC](https://forums.thehomestack.io/t/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/26569 "2026-10-22T17:19:10Z")
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. \[…\] This is a companion discussion topic for the original entr… --- ## [Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations](https://forums.thehomestack.io/t/meta-ordered-to-pay-25-billion-after-court-finds-43-million-privacy-violations/26568)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 4:49pm UTC](https://forums.thehomestack.io/t/meta-ordered-to-pay-25-billion-after-court-finds-43-million-privacy-violations/26568 "2026-10-22T16:49:03Z")
Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit that sprang from the company’s Cambridge Analytica data scandal, which came to light… --- ## [Microsoft shares how to fix broken Exchange Online EWS apps](https://forums.thehomestack.io/t/microsoft-shares-how-to-fix-broken-exchange-online-ews-apps/26567)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 4:14pm UTC](https://forums.thehomestack.io/t/microsoft-shares-how-to-fix-broken-exchange-online-ews-apps/26567 "2026-10-22T16:14:37Z")
Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working. \[…\] This is a companion discussion topic for the original entry at https:… --- ## [Top 5 Linux Community Habits That Really Annoy Me](https://forums.thehomestack.io/t/top-5-linux-community-habits-that-really-annoy-me/26566)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 3:44pm UTC](https://forums.thehomestack.io/t/top-5-linux-community-habits-that-really-annoy-me/26566 "2026-10-22T15:44:32Z")
This is a companion discussion topic for the original entry at https://www.youtube.com/watch?v=LK-QhBT92hg --- ## [INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown](https://forums.thehomestack.io/t/interpol-arrests-1-462-suspects-disrupts-10-909-cybercrime-networks-in-global-crackdown/26565)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 2:43pm UTC](https://forums.thehomestack.io/t/interpol-arrests-1-462-suspects-disrupts-10-909-cybercrime-networks-in-global-crackdown/26565 "2026-10-22T14:43:51Z")
INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law enforcement agencies … --- ## [Machine speed attacks require machine speed detection and response](https://forums.thehomestack.io/t/machine-speed-attacks-require-machine-speed-detection-and-response/26564)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 2:09pm UTC](https://forums.thehomestack.io/t/machine-speed-attacks-require-machine-speed-detection-and-response/26564 "2026-10-22T14:09:27Z")
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI installers, and MFA p… --- ## [The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat](https://forums.thehomestack.io/t/the-ai-agent-nobody-owns-watch-expert-webinar-on-your-newest-insider-threat/26563)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 1:39pm UTC](https://forums.thehomestack.io/t/the-ai-agent-nobody-owns-watch-expert-webinar-on-your-newest-insider-threat/26563 "2026-10-22T13:39:24Z")
Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. Nobody reviewed its… --- ## [Amazon says PHP2Shell exploitation began 4 days before patches](https://forums.thehomestack.io/t/amazon-says-php2shell-exploitation-began-4-days-before-patches/26562)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 1:39pm UTC](https://forums.thehomestack.io/t/amazon-says-php2shell-exploitation-began-4-days-before-patches/26562 "2026-10-22T13:39:23Z")
Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday. \[…\] This is a companion discussion topic for the origin… --- ## [How Image Watermarking Works - Computerphile](https://forums.thehomestack.io/t/how-image-watermarking-works-computerphile/26561)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 1:08pm UTC](https://forums.thehomestack.io/t/how-image-watermarking-works-computerphile/26561 "2026-10-22T13:08:52Z")
This is a companion discussion topic for the original entry at https://www.youtube.com/watch?v=h6j\_ixGnpiY --- ## [GitLab warns of new max severity code execution vulnerability](https://forums.thehomestack.io/t/gitlab-warns-of-new-max-severity-code-execution-vulnerability/26560)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 12:04pm UTC](https://forums.thehomestack.io/t/gitlab-warns-of-new-max-severity-code-execution-vulnerability/26560 "2026-10-22T12:04:01Z")
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers. \[…\] This is a companion discussion topic for the orig… --- ## [OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL](https://forums.thehomestack.io/t/opencode-flaw-lets-malicious-mcp-servers-execute-code-during-sign-in-on-windows-and-wsl/26559)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 11:33am UTC](https://forums.thehomestack.io/t/opencode-flaw-lets-malicious-mcp-servers-execute-code-during-sign-in-on-windows-and-wsl/26559 "2026-10-22T11:33:55Z")
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer’s Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Context Protocol) server… --- ## [What Is LLM Inference? How AI Models Generate Responses](https://forums.thehomestack.io/t/what-is-llm-inference-how-ai-models-generate-responses/26558)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 11:33am UTC](https://forums.thehomestack.io/t/what-is-llm-inference-how-ai-models-generate-responses/26558 "2026-10-22T11:33:55Z")
This is a companion discussion topic for the original entry at https://www.youtube.com/watch?v=615-yWyS1n0 --- ## [Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation](https://forums.thehomestack.io/t/railway-says-intruder-may-have-accessed-customer-secrets-urges-credential-rotation/26557)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 11:33am UTC](https://forums.thehomestack.io/t/railway-says-intruder-may-have-accessed-customer-secrets-urges-credential-rotation/26557 "2026-10-22T11:33:54Z")
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed “anomalous activity” related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized … --- ## [Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed](https://forums.thehomestack.io/t/someone-tried-to-exploit-php2shell-4-days-before-the-vulnerabilities-were-publicly-disclosed/26556)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 9:20am UTC](https://forums.thehomestack.io/t/someone-tried-to-exploit-php2shell-4-days-before-the-vulnerabilities-were-publicly-disclosed/26556 "2026-10-22T09:20:21Z")
Amazon’s Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities dating back to October 17, 2026, against its MadPot honeypot service, as the flaws come … --- ## [New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification](https://forums.thehomestack.io/t/new-qpack-flaws-can-crash-http-3-servers-trigger-up-to-4-000-fold-memory-amplification/26555)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 9:20am UTC](https://forums.thehomestack.io/t/new-qpack-flaws-can-crash-http-3-servers-trigger-up-to-4-000-fold-memory-amplification/26555 "2026-10-22T09:20:19Z")
A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP hea… --- ## [Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions](https://forums.thehomestack.io/t/node-js-brotli-decoder-bug-could-allow-remote-code-execution-in-all-supported-versions/26554)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 9:20am UTC](https://forums.thehomestack.io/t/node-js-brotli-decoder-bug-could-allow-remote-code-execution-in-all-supported-versions/26554 "2026-10-22T09:20:19Z")
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the proj… --- ## [LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release](https://forums.thehomestack.io/t/litellm-suspects-github-token-leak-in-ai-gateway-logs-behind-malicious-package-release/26553)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 9:20am UTC](https://forums.thehomestack.io/t/litellm-suspects-github-token-leak-in-ai-gateway-logs-behind-malicious-package-release/26553 "2026-10-22T09:20:18Z")
LiteLLM on Wednesday disclosed that threat actors compromised “multiple independent security controls” to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 202… --- ## [Authorities disrupt nearly 11,000 cybercrime networks in Africa](https://forums.thehomestack.io/t/authorities-disrupt-nearly-11-000-cybercrime-networks-in-africa/26552)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 8:50am UTC](https://forums.thehomestack.io/t/authorities-disrupt-nearly-11-000-cybercrime-networks-in-africa/26552 "2026-10-22T08:50:26Z")
Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business email compromise, ransomware, and online scams. \[…\] T… --- ## [China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack](https://forums.thehomestack.io/t/china-linked-hackers-use-artex-ai-agents-in-connectwise-supply-chain-attack/26551)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 5:40am UTC](https://forums.thehomestack.io/t/china-linked-hackers-use-artex-ai-agents-in-connectwise-supply-chain-attack/26551 "2026-10-22T05:40:26Z")
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, … --- ## [PHP Broke The Internet; Anthropic loses more money than the Metaverse - Talking Heads Ep.455](https://forums.thehomestack.io/t/php-broke-the-internet-anthropic-loses-more-money-than-the-metaverse-talking-heads-ep-455/26550)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 2:34am UTC](https://forums.thehomestack.io/t/php-broke-the-internet-anthropic-loses-more-money-than-the-metaverse-talking-heads-ep-455/26550 "2026-10-22T02:34:44Z")
This is a companion discussion topic for the original entry at https://www.youtube.com/watch?v=7SHa-2ldWCQ --- ## [Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks](https://forums.thehomestack.io/t/google-chrome-adds-gemini-powered-scam-detection-warns-users-of-clickfix-attacks/26549)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 21, 2026, 10:25pm UTC](https://forums.thehomestack.io/t/google-chrome-adds-gemini-powered-scam-detection-warns-users-of-clickfix-attacks/26549 "2026-10-21T22:25:03Z")
Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix attacks. \[…\] This is a companion discussion topic for the original ent… --- ## [Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected](https://forums.thehomestack.io/t/japans-onamae-desktop-cloud-hacked-up-to-27-000-servers-affected/26548)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 21, 2026, 9:54pm UTC](https://forums.thehomestack.io/t/japans-onamae-desktop-cloud-hacked-up-to-27-000-servers-affected/26548 "2026-10-21T21:54:21Z")
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers’ servers. \[…\] This is a companion discussion topic for the or… --- ## [Lazarus hackers use post-quantum cryptography for malware delivery](https://forums.thehomestack.io/t/lazarus-hackers-use-post-quantum-cryptography-for-malware-delivery/26547)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 21, 2026, 8:49pm UTC](https://forums.thehomestack.io/t/lazarus-hackers-use-post-quantum-cryptography-for-malware-delivery/26547 "2026-10-21T20:49:56Z")
North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware. \[…\] This is a companion discussion topic for the original e… --- ## [Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases](https://forums.thehomestack.io/t/critical-gitlab-flaw-cvss-10-0-could-allow-unauthenticated-rce-across-12-years-of-releases/26546)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 21, 2026, 8:19pm UTC](https://forums.thehomestack.io/t/critical-gitlab-flaw-cvss-10-0-could-allow-unauthenticated-rce-across-12-years-of-releases/26546 "2026-10-21T20:19:53Z")
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014. The fix matter… --- ## [CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers](https://forums.thehomestack.io/t/cisa-hackers-chain-plex-flaws-in-plex2shell-attacks-to-breach-servers/26545)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 21, 2026, 6:49pm UTC](https://forums.thehomestack.io/t/cisa-hackers-chain-plex-flaws-in-plex2shell-attacks-to-breach-servers/26545 "2026-10-21T18:49:19Z")
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. \[…\] This is a companion discussion topic for the original en… [Next page](https://forums.thehomestack.io/c/rss/70.md?page=1)