Taka drobna lista dziur w sofcie i nie tylko za październik :smiley: PHP2Shell: a hole in the software behind ~70% of

Taka drobna lista dziur w sofcie i nie tylko za październik

• PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.

• eMudhra: the master keys that prove websites are real were cracked. One was the number 4.

• California: data on every public school student since 2023 stolen, including disability status

• Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers

• Zeabur: 321,810 accounts breached. The company is shutting down.

• LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer

• GitLab: a 10-out-of-10 severity hole in every version since 2014

• Cairn: criminals used an AI hacking tool to break into 100+ companies

• Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline

• Onamae: malware planted on up to 26,739 customer servers in Japan

• Signal: a bug could leave your mic and camera on after you hang up

• NGINX: 3 critical holes in software running ~1/3 of websites

• HTTP/3: a single connection can crash 7 of the 10 web server types tested

• Plex: hackers breaking into home media servers

• SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations

• Palo Alto: ransomware gangs breaking in through company firewalls

• Bullhorn: platform used by 10,000+ companies knocked offline

• Medi-Cal: 970,000 patients' data stolen

• WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites

• AOMEI: backup software's update server handed out a backdoor

• Meta Muse: Meta's AI agent exposed users' personal and business secrets

• Tor: 333 relays hijacked to steal logins

• TiDB Cloud: database company's cloud breached

• State Bank of India: India's biggest bank confirms a data breach

• OVHcloud: hackers slipped a password stealer into a cloud company's official tool

• Siemens: a software hole being used to spread malware

• North Korea: state hackers launch a new attack campaign on South Korea

#it #itsecurity