The exposure of Railway customer environment variables may have revealed API keys and database or registry credentials for some users. Railway said an unauthorized third party may have accessed encrypted variables and obtained decrypted contents in some cases. The disclosure came on October 22, 2026 after suspicious activity on systems that store deployment configuration data. Railway urged users to rotate secrets, review logs, and treat the event as a potential credential-compromise risk.

The malicious LiteLLM 1.107.0 release exfiltrated credentials, secrets, and environment variables from infected installs, exposing sensitive access data from affected environments. The payload impacted PyPI wheels and compromised container images used on Windows, Linux, and macOS. It also stole browser and host data and uploaded the material to litellm[.]dev/healthcheck after encrypting it with AES-256-CBC and RSA-4096. Operators of affected systems were told to isolate hosts, rebuild from clean backups, and rotate exposed secrets immediately.

The malicious LiteLLM 1.107.0 package payload is now confirmed as compiled malware that steals credentials and downloads remote-code execution tooling, putting affected installs at immediate risk. The payload was delivered through cook.pth, cook.py, and sitecustomize.py, which run during Python startup before the application loads. It affected Windows, Linux, and macOS installations, and even launching Python or pip on an impacted environment could trigger it. The stolen data was encrypted and uploaded to litellm[.]dev/healthcheck.

Arista issued interim defensive steps for VeloCloud Orchestrator (VCO) On-Prem while patches are being deployed for CVE-2026-114625, an actively exploited zero-day. The guidance tells operators to tighten access to the web interface, watch for connections from known malicious IPs, and review admin activity for unusual changes. The measures are intended to reduce exposure while authenticated attackers can escalate privileges through low-complexity SQL injection.

Arista Networks released security updates for CVE-2026-114625, an actively exploited SQL injection flaw in VeloCloud Orchestrator (VCO) On-Prem that can let authenticated attackers gain operator-level access. The weakness affects the VCO web interface and can expose the orchestrator host and managed data. Organizations running affected deployments need to verify patch status and restrict access until remediation is complete.

Arista Networks released security updates for CVE-2026-114625 in VeloCloud Orchestrator (VCO) On-Prem after the flaw was found actively exploited in the wild. The critical issue lets authenticated users with basic privileges escalate through SQL injection and gain operator or superuser operator access. The risk extends to the confidentiality, integrity, and availability of the orchestrator and managed data, while hosted VCO deployments on 5.2.3.18+, 6.1.3.10+, and 6.4.2.12+ are already patched.

A New Mexico court ordered Meta to pay $25 billion in penalties for 43 million privacy violations, escalating the legal and financial fallout from the Cambridge Analytica scandal. District Court Judge Francis J. Mathew said Meta and Facebook made misleading statements about consumer privacy and user control over data. The ruling ties the penalty to a lawsuit filed in 2021 under the state's unfair practices law.

Attackers are reaching enumeration and exfiltration within 15 minutes of initial access, forcing defenders to pair behavior-based detection with autonomous response across identity, cloud, code, and AI services. The guidance centers on catching suspicious token use, stolen-session replay, and MFA abuse that standard perimeter and identity controls often miss. It prioritizes low-friction containment such as revoking sessions, removing attacker-added MFA methods, and deactivating keys before data theft spreads.

The European Commission opened a formal investigation into Booking.com over possible Digital Services Act (DSA) compliance failures tied to fraudulent listings and phishing scams. Regulators will examine whether the platform adequately mitigated phishing risk, protected reservation and guest data, and met advertising transparency obligations. If violations are confirmed, Booking.com could face a fine of up to 6% of global annual turnover and be required to take corrective measures.

An Iranian threat group, Prince of Persia, was found using US-based C2 servers to support malware delivery and cyber-espionage, widening the operational reach of a long-running campaign. The group targets public and private sector organisations across the US, Europe and the Middle East, along with dissidents and regime opponents. Its toolkit includes Foudre, Tonnerre, and Tornado, with Tornado able to use HTTPS and the Telegram API as covert channels to blend into normal traffic and evade detection. The finding adds a rare infrastructure twist to a persistent, highly targeted operation.

The latest Prince of Persia malware set adds Foudre, Tonnerre, and Tornado tooling that enables document theft, screenshots, audio capture, and covert C2 traffic that can bypass firewalls. The chain was identified in findings published on October 22, and it is tied to an Iranian nation-state group. The activity supports cyber-espionage against organizations in the US, Europe, and the Middle East.

GitLab CE/EE instances are exposed to CVE-2026-110264, a maximum-severity integer-overflow flaw in the Regular Expression Compiler that can allow unauthenticated remote code execution until patched.

GitLab released security patches for CVE-2026-110264, a maximum-severity flaw in the Regular Expression Compiler that could let remote attackers execute code on GitLab CE and EE servers. The fix covers GitLab CE/EE versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, and 18.11.13, and affected users are told to patch immediately. The issue was reported through HackerOne, and GitLab.com is already on the patched build.

The ConnectWise Cloud Backup service was tied to a credential-abuse incident that enabled unauthorized Microsoft 365 sign-ins across 173 partner/customer tenants. The compromised vendor credential could expose mailboxes, OneDrive, SharePoint, Teams, and directory data wherever the app had been consented. ConnectWise shut off Cloud Backup application access while credential rotation and tenant review continue.

Interpol coordinated Operation Serengeti III, and authorities arrested 1,462 suspected cybercriminals while dismantling 10,909 malicious networks in a major cybercrime crackdown across 21 countries in Africa. The operation targeted business email compromise, ransomware, and online scams, and it recovered more than $105 million in illegal funds. Investigators also identified 65,929 victims and estimated losses of more than $385 million, underscoring the scale of the disruption.

FoxIO disclosed QPACK flaws in HTTP/3 stacks that let an unauthenticated attacker crash servers with one connection and trigger severe memory amplification. The issue affects seven of ten stacks FoxIO tested, and the firm released working proof-of-concept code while noting no public attacks in the wild. Fixes are available for quic-go, Cloudflare quiche, lsquic, and Wireshark, while Bun, h3 (hyperium), and aioquic were still unpatched at disclosure.

Chrome is adding Gemini-powered scam detection that flags deceptive websites and warns users when they copy suspicious ClickFix commands, strengthening protection against phishing and social engineering. The update expands Enhanced Protection in Safe Browsing with a new suspicious site warning for pages that show deceptive patterns but fall short of the full-page red alert threshold. It also shifts scam detection for Enhanced Protection users from an on-device model to a more powerful server-side model.

Onamae Desktop Cloud entered a service interruption that began at 04:00 local time on October 21, 2026, affecting all Desktop Cloud plans and leaving no restart date in place. The provider said it was progressively shutting down customer servers after the disruption was detected. Customers using the service face an immediate availability and operational breakage while restoration timing remains undefined.

Onamae Desktop Cloud suffered a confirmed intrusion after an unauthorized third party installed malicious programs in customer environments, affecting up to 26,739 servers and creating risk of data exposure on impacted systems. GMO Internet began shutting down customer servers on October 21, 2026 while the investigation continued. The provider said payment data was stored separately, but customers with secrets on their servers were urged to rotate them and watch for phishing attempts.

The Lazarus Group's FlashHole campaign is using ML-KEM post-quantum cryptography and a layered GitHub-based infection chain to deliver malware to South Korean organizations, raising the bar for detection and payload interception. The operation began in July 2025 and relies on phishing pages to pull victims into a multi-stage execution flow. It uses tools including LPEClient, TechHub, ClientHub, and Cubridge to decrypt, fetch, and load follow-on payloads. At least three South Korean companies were identified, with the broader target set likely larger.

PHP2Shell covers CVE-2026-109618 and CVE-2026-109619, two critical PHP flaws that prompted an emergency patch release for October 21, 2026 at 14:00 UTC. Amazon later reported a PHP2Shell exploitation attempt in MadPot on October 17, before disclosure, and said the activity was now being actively exploited in the wild. The fixes are PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12, and supported branches are the only ones with official patches. Older releases, including PHP 8.1 or earlier, remain without official fixes and require migration or compensating mitigations.

Cloudflare pushed an emergency update to its managed WAF ruleset, adding temporary protections against upcoming PHP vulnerabilities researchers are calling PHP2SHELL. The update matters because Cloudflare says it has already seen early attacks and is continuously adjusting the rules as new exploitation techniques appear. The protections are available to all Cloudflare customers, including those on free plans, but they are only a stopgap until the official PHP fixes are installed. Administrators still need to apply the PHP security updates once they are released.

Researchers identified Athena StealthRoute, a PhaaS platform that combines AI-generated lures, link-cloaking, and a marketplace to industrialize phishing operations. The service's AI Studio lets operators request tailored lure copy, support materials, and benign-looking decoy content, reducing the need to write phishing material from scratch. The platform was tied to about 89,700 attack-related messages across roughly 2,280 organizations in the US and Europe over the six months to October 9, 2026. By packaging preparation, delivery, and concealment into a single console while leaving credential theft to downstream services, it lowers the barrier for scalable phishing campaigns.

A self-directed AI agent now packages reconnaissance, exploitation, credential theft, botnet management, and Monero mining into a single malicious toolchain that can run without human approval. The captured instructions show how attackers are using hijacked AI models to automate malware-like behavior across multiple targets.

A self-directed AI agent built around hijacked AI models has been exposed as a scalable attack workflow that can execute up to 100,000 malicious actions without human approval. It searches for exposed LLM endpoints and chains scanning, exploitation, credential theft, Monero mining, and reinfection across targets. The design lowers the barrier to broad abuse by packaging offensive steps into one automated system. The activity shows how LLMjacking can be used as an at-scale offensive operation against self-hosted models, AI gateways, and MCP servers.

PHP2Shell is a pair of critical PHP vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619 that can enable remote code execution on vulnerable PHP deployments. The PHP security team released fixes on October 21, after urging administrators the day before to prepare to install the updates as soon as they became available. Before and after disclosure, defenders reported early probing and emergency mitigation steps, including Cloudflare stopgap rules and guidance to patch or isolate exposed systems. Amazon Threat Intelligence later said attackers began targeting the flaws on October 17, four days before the patches, and that the vulnerabilities are now being broadly exploited in the wild.

Asymptote Labs secured $5.5 million in seed funding to build runtime control and visibility infrastructure for enterprise AI agents, expanding a cybersecurity-focused commercial platform. The oversubscribed round was led by Tower Research Ventures, with participation from Lytical Ventures, 1984 Ventures, and South Park Commons. The company says the capital will fund product development, engineering expansion, and go-to-market efforts around Beacon and its real-time guardrail platform.

Google Chrome is rolling out improved safeguards against ClickFix attacks for users with Enhanced Protection enabled, reducing the chance that copied malicious commands will execute. The browser now detects suspicious clipboard content, scrubs the payload, and sends it to Safe Browsing for analysis before warning the user if it appears dangerous. The change targets a common social-engineering path that uses fake verification pages and command-paste prompts to deliver malware.

OpenAI updated Auto-Review for internal Codex use to spot and stop attempts to turn off misalignment monitoring, tightening a control that protects internal agent workflows from blind spots.

The Bronze Sandcastle campaign is extending Sandboxie DLL sideloading operations across Asia and Africa, increasing the risk of stealthy backdoor deployment in victim networks. Victims have been identified in the Philippines, Taiwan, Afghanistan, Namibia, and likely South Korea between August 2025 and August 2026. The operation stands out for consistently abusing trusted Sandboxie executables to load attacker-controlled code and evade static detection.