they’re calling it “Black October” and i don’t think people realize how serious this is
in the last 48 hours there have been over 27 major cybersecurity incidents. not in a month. not in a week. in 48 hours
any ONE of these would normally be the biggest story of the year
PHP: critical vulnerability in the software running 80% of the web. severity 9.2 out of 10
Node.js: high-severity flaw letting attackers take over servers remotely. affects versions 22, 24, and 26
Java: also compromised. three of the most used programming languages on earth hit at the same time
GitLab: a perfect 10 out of 10 severity hole in every version since 2014
Railway: hosting platform compromised. API keys for OpenAI, Claude, Stripe potentially exposed
Signal: a bug that could leave your mic and camera on after you hang up
WordPress: hackers stole a plugin maker’s keys and planted backdoors on websites
LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
and that’s not even half the list
thousands of AI agent swarms are reportedly scanning and attacking vulnerable servers right now. automated. around the clock
security researchers are saying this might be the early stages of a global cyber incident that nobody fully understands yet
if you run a website, use cloud services, store API keys on hosting platforms, or use any software built on PHP, Node.js, or Java you are potentially affected
update everything. rotate your API keys. change your passwords on critical services. enable 2FA everywhere you haven’t already
this is not a normal week on the internet. this is something different
in the last 48 hours there have been over 27 major cybersecurity incidents. not in a month. not in a week. in 48 hours
any ONE of these would normally be the biggest story of the year
PHP: critical vulnerability in the software running 80% of the web. severity 9.2 out of 10
Node.js: high-severity flaw letting attackers take over servers remotely. affects versions 22, 24, and 26
Java: also compromised. three of the most used programming languages on earth hit at the same time
GitLab: a perfect 10 out of 10 severity hole in every version since 2014
Railway: hosting platform compromised. API keys for OpenAI, Claude, Stripe potentially exposed
Signal: a bug that could leave your mic and camera on after you hang up
WordPress: hackers stole a plugin maker’s keys and planted backdoors on websites
LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
and that’s not even half the list
thousands of AI agent swarms are reportedly scanning and attacking vulnerable servers right now. automated. around the clock
security researchers are saying this might be the early stages of a global cyber incident that nobody fully understands yet
if you run a website, use cloud services, store API keys on hosting platforms, or use any software built on PHP, Node.js, or Java you are potentially affected
update everything. rotate your API keys. change your passwords on critical services. enable 2FA everywhere you haven’t already
this is not a normal week on the internet. this is something different
Oct 22, 2026 · 9:47 AM UTC
432
4,453
20,959
2,363,876
@BalaiBB 48 小时 27 起，这个数字谁统计的？出典贴一下。PHP 那个漏洞本身是真的，但“Black October”这种命名先当营销词看。
0
0
0
181
@BalaiBB 27 sự cố lớn trong 48 giờ là con số đáng lo, cho thấy lỗ hổng chuỗi cung ứng phần mềm đang dồn thành từng đợt. Việc cần làm ngay là vá và kiểm tra lại bản sao lưu. Bạn ưu tiên vá hệ thống nào trước?
0
0
5
3,006
@BalaiBB Someone(s) is trying to cover up their tracks with a global shutdown?
6
8
134
22,465
@BalaiBB Of course there has. Its how the elites will conduct the "collapse." Blame it on AI/hacks/cybersecurity. Then propose more global consolidation as the solution. Problem-Reaction-Solution is their playbook. You new here?
1
0
8
1,699
@BalaiBB 27 major incidents in 48 hours? my wifi has been more stable than that.
1
0
4
1,428
The housing market's problems are no longer limited to high prices, expensive mortgages, and weak home sales. New foreclosure data suggests financial pressure is increasingly reaching existing homeowners. x.com/i/article/2114…
6
14
61
1,708
@BalaiBB That's definitely odd....non reporting by the MSM always indicates it's particularly important.
2
0
90
14,227
@BalaiBB 1/2 This is the low hanging fruit. People will start to panic when the lights shut off because they discover a 0 day on a legacy system. How long do you think we have before something really crazy happens? Months, maybe a couple of years. People don’t take it seriously...
1
0
4
1,593
@BalaiBB It's a whole new world and there's no Disney theme song to it.
0
0
1
1,466
@BalaiBB Is there a reason why you didn’t mention the Indian company’s private key issue for the certs? That was more critical than some of the things at the bottom of your list.
1
0
27
9,294
@BalaiBB The ability to find massive security flaws with AI is why we’re going to end up getting an Internet that is segmented from the third world. The only deterrent will be the ability to easily determine who committed the crime, and send them to prison.
0
0
1
3,817
@BalaiBB I can't help but feel like this is fear mongering for likes and engagement...
0
0
3
1,849
@BalaiBB As I told my 11 year old this morning
“If you were still playing Fortnite on Xbox 1, someone could steal your Vbucks dude”
Haha
Anyone sensible has already upgraded from PHP and uses a web application firewall to protect critical / PCI applications
“If you were still playing Fortnite on Xbox 1, someone could steal your Vbucks dude”
Haha
Anyone sensible has already upgraded from PHP and uses a web application firewall to protect critical / PCI applications
1
0
8
4,071
@BalaiBB I have no expertise in cybersecurity, but what these incidents obviously point out is the laziness and incompetence of the outsourcing firms, which have been entrusted to deliver quality, dependable code.
Clearly, massive financial refunds and penalties are called for.
Clearly, massive financial refunds and penalties are called for.
9
0
158
27,512
@BalaiBB I understood about 5% of this, but I’ve been seeing this all over. What can regular people do, if anything, to protect ourselves?
2
0
4
6,573
@BalaiBB Mainstream media is only talking about the PHP incident (I get it). But even hacker news is pretty quiet.
Why?
Why?
0
0
1
1,291