Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
Two critical PHP flaws forced government websites across Europe offline this week, revealing a systemic problem: AI-driven vulnerability discovery is now faster than most organizations can patch, and 40% of PHP installations run unsupported versions with no safety net.
Hewlett Packard Enterprise released updates addressing 72 vulnerabilities in its Aruba Operating System, with eight maximum-severity issues allowing unauthenticated remote code execution and authentication bypass on wireless infrastructure devices.
The cloud deployment platform detected suspicious activity affecting systems storing customer secrets and confirmed that some decrypted environment variables may have been accessed by an unauthorized party.
AWS has launched AWS Continuum for code vulnerabilities as a generally available service, automating the detection, validation, and remediation of exploitable code flaws while keeping human teams in control of deployment decisions.
Attackers compromised the LiteLLM release pipeline to push a malicious version that harvests cloud credentials, AI secrets, and developer keys from affected systems across Windows, Linux, and macOS.
Arista Networks has released fixes for a critical SQL injection flaw in VeloCloud Orchestrator On-Prem that allows authenticated attackers to escalate privileges and access internal functionality.
Two critical PHP vulnerabilities forced sites offline this week, but the real damage may come from disputes over how the patches were released and the strain on maintainers facing AI-accelerated exploit discovery.
Exploitation of two critical PHP vulnerabilities started four days ahead of the October 21 patch release, with attackers using anonymized infrastructure and multiple proof-of-concept variants.
