# Latest **URL:** https://forums.thehomestack.io/latest.md [Latest](https://forums.thehomestack.io/latest.md) · [Categories](https://forums.thehomestack.io/categories.md) · [Tags](https://forums.thehomestack.io/tags.md) --- ## [Abandoned Popcorn Time app exposed millions of devices to RCE attacks](https://forums.thehomestack.io/t/abandoned-popcorn-time-app-exposed-millions-of-devices-to-rce-attacks/26597)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 9:28pm UTC](https://forums.thehomestack.io/t/abandoned-popcorn-time-app-exposed-millions-of-devices-to-rce-attacks/26597 "2026-10-23T21:28:12Z")
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with… --- ## [BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations](https://forums.thehomestack.io/t/blackx-uefi-bootkit-bypasses-secure-boot-on-patched-windows-systems-missing-revocations/26596)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 7:18pm UTC](https://forums.thehomestack.io/t/blackx-uefi-bootkit-bypasses-secure-boot-on-patched-windows-systems-missing-revocations/26596 "2026-10-23T19:18:04Z")
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, U… --- ## [Microsoft Teams to get AI-powered, context-aware phishing detection](https://forums.thehomestack.io/t/microsoft-teams-to-get-ai-powered-context-aware-phishing-detection/26595)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 7:18pm UTC](https://forums.thehomestack.io/t/microsoft-teams-to-get-ai-powered-context-aware-phishing-detection/26595 "2026-10-23T19:18:03Z")
Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026. \[…\] This is a companion discussion topic for the original entry at https://www.bleepingcomputer.com/… --- ## [Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions](https://forums.thehomestack.io/t/exposed-infrastructure-reveals-how-ransomware-affiliates-used-ai-agents-to-execute-intrusions/26594)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 6:18pm UTC](https://forums.thehomestack.io/t/exposed-infrastructure-reveals-how-ransomware-affiliates-used-ai-agents-to-execute-intrusions/26594 "2026-10-23T18:18:01Z")
Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an “Autonomous Red Team … --- ## [Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws](https://forums.thehomestack.io/t/ruby-fixes-three-regex-engine-bugs-responsible-for-four-critical-gitlab-rce-flaws/26593)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 6:18pm UTC](https://forums.thehomestack.io/t/ruby-fixes-three-regex-engine-bugs-responsible-for-four-critical-gitlab-rce-flaws/26593 "2026-10-23T18:18:00Z")
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past … --- ## [AI Home Security Threat](https://forums.thehomestack.io/t/ai-home-security-threat/26592)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 5:16pm UTC](https://forums.thehomestack.io/t/ai-home-security-threat/26592 "2026-10-23T17:16:25Z")
This is a companion discussion topic for the original entry at https://www.youtube.com/shorts/4ivd3zRiuys --- ## [Microsoft: Windows Server 2016 reaches end of support in January](https://forums.thehomestack.io/t/microsoft-windows-server-2016-reaches-end-of-support-in-january/26591)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 5:16pm UTC](https://forums.thehomestack.io/t/microsoft-windows-server-2016-reaches-end-of-support-in-january/26591 "2026-10-23T17:16:22Z")
Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027. \[…\] This is a companion discussion topic for the original entry at https://www.bleepingcomput… --- ## [Quest Diagnostics confirms data breach exposed patient records](https://forums.thehomestack.io/t/quest-diagnostics-confirms-data-breach-exposed-patient-records/26590)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 4:42pm UTC](https://forums.thehomestack.io/t/quest-diagnostics-confirms-data-breach-exposed-patient-records/26590 "2026-10-23T16:42:11Z")
American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system. \[…\] This is a companion discussion topic… --- ## [PHP shares mitigation for new RCE vulnerability with no patch](https://forums.thehomestack.io/t/php-shares-mitigation-for-new-rce-vulnerability-with-no-patch/26589)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 3:42pm UTC](https://forums.thehomestack.io/t/php-shares-mitigation-for-new-rce-vulnerability-with-no-patch/26589 "2026-10-23T15:42:03Z")
The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch. \[…\] This is a companion discussion topic for the… --- ## [Ubuntu 26.10 Is Here! Here’s How to Install It](https://forums.thehomestack.io/t/ubuntu-26-10-is-here-here-s-how-to-install-it/26588)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 2:41pm UTC](https://forums.thehomestack.io/t/ubuntu-26-10-is-here-here-s-how-to-install-it/26588 "2026-10-23T14:41:49Z")
This is a companion discussion topic for the original entry at https://www.youtube.com/watch?v=IRXKvD267VA --- ## [Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials](https://forums.thehomestack.io/t/hackers-breach-enterprise-firewalls-and-vpns-exposing-over-70-000-credentials/26587)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 2:41pm UTC](https://forums.thehomestack.io/t/hackers-breach-enterprise-firewalls-and-vpns-exposing-over-70-000-credentials/26587 "2026-10-23T14:41:47Z")
Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. "Artifacts from this i… --- ## [You gave your AI agent access, but who is giving it orders?](https://forums.thehomestack.io/t/you-gave-your-ai-agent-access-but-who-is-giving-it-orders/26586)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 2:11pm UTC](https://forums.thehomestack.io/t/you-gave-your-ai-agent-access-but-who-is-giving-it-orders/26586 "2026-10-23T14:11:37Z")
AI agents can be manipulated through malicious emails, websites, and plugins into executing commands, stealing data, or deleting files using their legitimate permissions. Gen Digital explains how its Agent Trust Hub help… --- ## [HPE patches eight max severity RCE and auth bypass AOS flaws](https://forums.thehomestack.io/t/hpe-patches-eight-max-severity-rce-and-auth-bypass-aos-flaws/26585)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 1:11pm UTC](https://forums.thehomestack.io/t/hpe-patches-eight-max-severity-rce-and-auth-bypass-aos-flaws/26585 "2026-10-23T13:11:47Z")
Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues. \[…\] This… --- ## [Russia-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack](https://forums.thehomestack.io/t/russia-linked-hackers-used-new-mesh-network-backdoor-in-destructive-ukraine-attack/26584)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 11:40am UTC](https://forums.thehomestack.io/t/russia-linked-hackers-used-new-mesh-network-backdoor-in-destructive-ukraine-attack/26584 "2026-10-23T11:40:19Z")
The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year. According to ESET, the attack involved U… --- ## [PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches](https://forums.thehomestack.io/t/php-warns-of-another-unpatched-rce-risk-two-days-after-emergency-php2shell-patches/26583)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 11:40am UTC](https://forums.thehomestack.io/t/php-warns-of-another-unpatched-rce-risk-two-days-after-emergency-php2shell-patches/26583 "2026-10-23T11:40:19Z")
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web application… --- ## [Self-replicating AI, your doctor’s chatbot & agents at dinner](https://forums.thehomestack.io/t/self-replicating-ai-your-doctor-s-chatbot-agents-at-dinner/26582)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 10:40am UTC](https://forums.thehomestack.io/t/self-replicating-ai-your-doctor-s-chatbot-agents-at-dinner/26582 "2026-10-23T10:40:13Z")
This is a companion discussion topic for the original entry at https://www.youtube.com/watch?v=WLhh5FeLpy0 --- ## [Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image](https://forums.thehomestack.io/t/critical-flaw-in-python-s-popular-pillow-image-library-allows-code-execution-via-a-crafted-image/26581)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 10:40am UTC](https://forums.thehomestack.io/t/critical-flaw-in-python-s-popular-pillow-image-library-allows-code-execution-via-a-crafted-image/26581 "2026-10-23T10:40:11Z")
Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in the way Pillow handle… --- ## [Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances](https://forums.thehomestack.io/t/critical-x402-sdk-flaw-could-let-malicious-apis-drain-ai-agents-token-balances/26580)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 9:35am UTC](https://forums.thehomestack.io/t/critical-x402-sdk-flaw-could-let-malicious-apis-drain-ai-agents-token-balances/26580 "2026-10-23T09:35:04Z")
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22. The cause was the SDKs’ default c… --- ## [PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware](https://forums.thehomestack.io/t/php2shell-exploit-attempts-hit-millions-as-attackers-try-to-deploy-mirai-malware/26579)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 7:57am UTC](https://forums.thehomestack.io/t/php2shell-exploit-attempts-hit-millions-as-attackers-try-to-deploy-mirai-malware/26579 "2026-10-23T07:57:21Z")
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing th… --- ## [Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data](https://forums.thehomestack.io/t/researchers-demonstrate-node2shell-rce-exploit-on-node-js-build-using-crafted-brotli-data/26578)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 23, 2026, 7:57am UTC](https://forums.thehomestack.io/t/researchers-demonstrate-node2shell-rce-exploit-on-node-js-build-using-crafted-brotli-data/26578 "2026-10-23T07:57:17Z")
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their “Node2Shell” proof of concept ran code on the official N… --- ## [Railway warns devs to rotate secrets after potential breach](https://forums.thehomestack.io/t/railway-warns-devs-to-rotate-secrets-after-potential-breach/26577)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 9:29pm UTC](https://forums.thehomestack.io/t/railway-warns-devs-to-rotate-secrets-after-potential-breach/26577 "2026-10-22T21:29:51Z")
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week. \[…\] This is a companion discussion topic for t… --- ## [VLOG Thursday 511: 45 Drives Creator Summit, Projects, & Homelab Q&A](https://forums.thehomestack.io/t/vlog-thursday-511-45-drives-creator-summit-projects-homelab-q-a/26576)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 8:59pm UTC](https://forums.thehomestack.io/t/vlog-thursday-511-45-drives-creator-summit-projects-homelab-q-a/26576 "2026-10-22T20:59:45Z")
This is a companion discussion topic for the original entry at https://www.youtube.com/watch?v=q6EtwOhjSdg --- ## [Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks](https://forums.thehomestack.io/t/arista-warns-of-critical-velocloud-sql-injection-zero-day-exploited-in-attacks/26575)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 8:24pm UTC](https://forums.thehomestack.io/t/arista-warns-of-critical-velocloud-sql-injection-zero-day-exploited-in-attacks/26575 "2026-10-22T20:24:50Z")
Attackers are exploiting a zero-day SQL injection flaw in Arista’s VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets … --- ## [Capcom confirms data breach affecting 11.7 million accounts](https://forums.thehomestack.io/t/capcom-confirms-data-breach-affecting-11-7-million-accounts/26574)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 8:24pm UTC](https://forums.thehomestack.io/t/capcom-confirms-data-breach-affecting-11-7-million-accounts/26574 "2026-10-22T20:24:49Z")
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information. \[…\] This is a companion discussio… --- ## [LiteLLM release pipeline hacked to distribute info-stealer malware](https://forums.thehomestack.io/t/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/26573)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 7:24pm UTC](https://forums.thehomestack.io/t/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/26573 "2026-10-22T19:24:38Z")
Hackers compromised the LiteLLM project’s PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. \[…\] This is a companion discussion topic for the … --- ## [Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes](https://forums.thehomestack.io/t/two-cvss-9-0-linux-ksmbd-rce-flaws-disclosed-on-public-mailing-lists-before-kernel-fixes/26572)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 6:19pm UTC](https://forums.thehomestack.io/t/two-cvss-9-0-linux-ksmbd-rce-flaws-disclosed-on-public-mailing-lists-before-kernel-fixes/26572 "2026-10-22T18:19:07Z")
Linux servers running KSMBD, the kernel’s built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro’s Zero Day Initiative, with no fix yet in the mainline kernel. One… --- ## [ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More](https://forums.thehomestack.io/t/threatsday-ai-secrets-leak-pingcap-source-theft-signal-hang-up-flaw-laravel-auth-bypass-21-more/26571)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 6:19pm UTC](https://forums.thehomestack.io/t/threatsday-ai-secrets-leak-pingcap-source-theft-signal-hang-up-flaw-laravel-auth-bypass-21-more/26571 "2026-10-22T18:19:07Z")
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked… --- ## [eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable](https://forums.thehomestack.io/t/emudhra-to-exit-global-ssl-tls-business-after-8-intermediate-ca-keys-found-easily-guessable/26570)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 6:19pm UTC](https://forums.thehomestack.io/t/emudhra-to-exit-global-ssl-tls-business-after-8-intermediate-ca-keys-found-easily-guessable/26570 "2026-10-22T18:19:04Z")
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private key… --- ## [Arista patches new VeloCloud Orchestrator zero-day exploited in attacks](https://forums.thehomestack.io/t/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/26569)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 5:19pm UTC](https://forums.thehomestack.io/t/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/26569 "2026-10-22T17:19:10Z")
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. \[…\] This is a companion discussion topic for the original entr… --- ## [Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations](https://forums.thehomestack.io/t/meta-ordered-to-pay-25-billion-after-court-finds-43-million-privacy-violations/26568)
**Author:** [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 4:49pm UTC](https://forums.thehomestack.io/t/meta-ordered-to-pay-25-billion-after-court-finds-43-million-privacy-violations/26568 "2026-10-22T16:49:03Z")
Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit that sprang from the company’s Cambridge Analytica data scandal, which came to light… [Next page](https://forums.thehomestack.io/latest.md?page=1)