October 21 Cybersecurity Nightmare: PHP and Node.js Flaws, LiteLLM Backdoor, and Active Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about attacks already underway. PHP servers needed urgent patches. An AI software package was stealing credentials. Other investigations exposed weaknesses in certificate trust, remote …

Hackers Are Breaking Into FortiGate, FortiWeb and Palo Alto GlobalProtect Systems to Steal Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Internet-facing firewalls and VPN systems are under attack in a campaign that aims to steal credentials and gain lasting access to corporate networks. The activity targets FortiGate and FortiWeb devices from Fortinet, as well as Palo Alto Networks GlobalProtect portals. …

China-Linked Hackers Use ARTEX AI to Target 2,250 Microsoft 365 Tenants After ConnectWise Breach

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

China-state-aligned hackers used ARTEX, an AI-powered penetration-testing framework, to attempt access to more than 2,250 Microsoft 365 tenants following the ConnectWise Cloud Backup breach. Microsoft attributed the attack to Storm-0940 and reported 2,900 sign-in attempts per minute, leaving security teams …

Railway Security Incident: Hackers May Have Accessed Customer Environment Variables

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Railway has disclosed a security incident in which an unauthorized third party may have accessed customer environment variables, including some decrypted values. The cloud platform warned that the affected data could contain API keys, database passwords, and private registry credentials, …

12-Year-Old GitLab Vulnerability Allows Remote Code Execution on Self-Managed Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitLab has released urgent security updates for a critical vulnerability that could let attackers run code on self-managed servers without logging in. Tracked as CVE-2026-110264, the flaw carries the maximum CVSS score of 10.0 and affects both GitLab Community Edition …

GoDaddy Revoking 404,607 TLS Certificates Following Compliance Failures

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GoDaddy launched a mass revocation of 404,607 SSL/TLS certificates after finding that issued certificates did not match its published certificate policies. The company missed its required revocation deadline, creating a second compliance issue. An updated customer notice says the incorrectly …

Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New York, NY, USA, October 21st, 2026, CyberNewswire According to the 2026 Autonomous Agents Threat Report, published by Arrakis Security, 76% of active agents have not run in 60 days, but their credentials still work and their triggers still fire. …

The AI Adoption Blind Spot: How Fake AI Tools Put Enterprises at Risk 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AI adoption is accelerating across enterprises, with employees increasingly relying on platforms like ChatGPT, Claude, and Microsoft Copilot for everyday work. Cybercriminals are exploiting this growing trust, distributing malicious applications disguised as legitimate AI tools to steal credentials, deliver malware, …

Node.js Releases Security Updates to Fix High-Severity TLS, DNS and Brotli Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Node.js has released security updates for its 26.x, 24.x, and 22.x branches to address ten vulnerabilities, including four high-severity flaws affecting DNS lookups, TLS certificate checks, and Brotli decompression. The supplied release details identify 26.12.1, 24.22.1, and 22.23.4 as the …

Hackers Use AI-Powered Browsers to Hide Thousands of Fake Accounts and Bypass Security Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are using AI-enabled “antidetect” browsers to manage large networks of fake online accounts while making each profile appear to come from a different person, device, or location. Check Point Research reported that these tools can help a single operator …