The Good, the Bad and the Ugly in Cybersecurity - Week 44 (2026)

Publisher preview

This past week, cyber defenders responded to a cluster of vulnerability disclosures and security incidents collectively dubbed “Black October,” spanning flaws in PHP2SHELL, Node.js, GitLab, and Brotli, a software supply chain attack in LiteLLM, and compromised certificate authority keys at eMudhra. Despite PHP2SHELL affecting roughly70% of websites worldwide, mass, internet-wide exploitation of the kind seen with Log4SHELL hasn’t materialized. PHP2SHELL lacks a universaloffset, since heap layouts, memory alignments, and worker states differ by PHP version, build, and SAPI configuration, and attackers mustcraft specific request streams to line up memory blocks before triggering the underlying out-of-memory error. That complexity hasn’t stopped targeted compromises against systems, but it has kept broad, automated attacks from succeeding at scale. CISAadded both PHP2SHELL CVEs to its Known Exploited Vulnerabilities catalog, with a remediation deadline of October 29 for federal agencies. International law enforcement this week also delivered major blows against cybercrime syndicates. Authoritiesextradited Chinese national Zheng Zhao from the Netherlands to California over an alleged multimillion-dollar cryptocurrency investment scheme that defrauded 174 American victims through fake trading platforms.

A saved ApplyDjinn digest is not available for this story yet.

This preview is supplied by the publisher. The complete publication remains at its original source.