[AINews] Black October

Latent Space's AINews dubbed the past 48 hours 'Black October': a cluster of critical AI-accelerated vulnerability disclosures landing at once — an unauthenticated RCE in PHP (PHP2Shell), a CVSS 10 GitLab flaw affecting releases since 2014, a Node.js Brotli decoder RCE, a password stealer shipped in LiteLLM 1.107.0, exposed customer keys at Railway, a 321,810-account breach that is shutting down Zeabur, and eMudhra exiting the CA business after its keys proved trivially weak. Why it matters: the wave shows attackers and AI-assisted researchers compressing disclosure timelines, leaving defenders with no quiet week to patch.

• Latent Space2026-10-23 10:09