The internet is on fireA central, community-maintained tracker of recent cybersecurity and AI incidents: breaches, backdoored packages, exploited vulnerabilities and AI platform incidents, each linked to its original source and labelled by how solid the evidence is.https://kuber.studio/internetonfire/https://kuber.studio/internetonfire/assets/favicon.svgKuber Mehtahttps://x.com/kuberwastaken2026-10-22T00:00:00Zhttps://kuber.studio/internetonfire/#litellm-supply-chain-v11070LiteLLM 1.107.0 shipped a credential stealer via PyPI and Docker2026-10-21T00:00:00ZCritical severity · Confirmed. LiteLLM confirms its release pipeline pushed malicious 1.107.0 packages to PyPI and container registries. The malware stole credentials and loaded remote-code tools. Affected artifacts were removed; private enterprise releases were not impacted.https://kuber.studio/internetonfire/#onamae-desktop-cloud-malwareOnamae: malware planted on up to 26,739 Desktop Cloud servers2026-10-21T00:00:00ZCritical severity · Confirmed. Onamae says malicious programs were placed in customer Desktop Cloud server environments. Up to 26,739 servers were potentially affected, and it began stopping servers to contain the incident. Data viewing was possible; data theft was not confirmed.https://kuber.studio/internetonfire/#php2shell-cve-2026-109618-109619PHP2Shell: two critical 9.2 RCE flaws in PHP core2026-10-21T00:00:00ZCritical severity · Confirmed. PHP fixed two critical core bugs, CVE-2026-109618 and CVE-2026-109619, that can allow unauthenticated remote code execution. The PHP team rates both 9.2 and urges immediate updates. All web-serving PHP installations need review, with the highest demonstrated risk in Apache mod_php.https://kuber.studio/internetonfire/#railway-env-vars-breachRailway customer secrets possibly decrypted; rotate everything2026-10-21T00:00:00ZCritical severity · Confirmed. Railway says an unauthorised party may have accessed encrypted customer environment variables and decrypted some of them. It paused deployments during its investigation and recommended credential rotation. The affected-account scope remained unresolved.https://kuber.studio/internetonfire/#microsoft-artex-storm0940Storm-0940 used agentic AI to attack hundreds of orgs, says Microsoft2026-10-21T00:00:00ZCritical severity · Confirmed. Microsoft Threat Intelligence reports that China-state-aligned Storm-0940 used ARTEX agentic AI to automate attacks targeting hundreds of organizations. Some attacks gained privileged cloud access in under three hours. Microsoft attributes the ConnectWise supply-chain compromise to this campaign; that incident is also listed separately with its vendor response.https://kuber.studio/internetonfire/#gitlab-cve-2026-110264-onigmoGitLab: CVSS 10.0 RCE affecting 12 years of releases2026-10-21T00:00:00ZHigh severity · Confirmed. GitLab released fixes for CVE-2026-110264, a CVSS 10.0 flaw in its bundled regular-expression compiler that could allow unauthenticated code execution under certain conditions. Older self-managed releases are affected; no exploitation was known in the captured reporting.https://kuber.studio/internetonfire/#tor-exit-relay-hijack333 Tor exit relays rerouted SSH to harvest passwords2026-10-21T00:00:00ZHigh severity · Reported. A researcher found 333 Tor exit relays (~10% of the network's ~3,000 exits) redirecting SSH connections through 12 interception servers using the Ebury OpenSSH backdoor, harvesting passwords when users accepted forged host keys. Exit policies on hundreds of relays were rewritten Oct 1-5; Tor directory authorities removed the compromised relays around Oct 20-21.https://kuber.studio/internetonfire/#bullhorn-outages-october-2026Bullhorn: contained cyber incident, then a separate login outage2026-10-21T00:00:00ZMedium severity · Confirmed. Bullhorn’s status updates describe separate events: a contained 17 October cyber incident, precautionary PHP2Shell product shutdowns, and a 21 October login outage linked to database-replication lag. They should not be presented as one confirmed breach.https://kuber.studio/internetonfire/#rajasthan-police-allegationGroup claims Rajasthan Police breach and offers data for sale2026-10-21T00:00:00ZMedium severity · Unverified. A group calling itself Scarlettgroup claims to have breached Rajasthan Police and offered data for sale. Coverage repeats claims of about 70,000 identity records and 59,460 mobile numbers. These figures and the alleged breach are unverified.https://kuber.studio/internetonfire/#nodejs-october-2026-security-releaseNode.js patches a Brotli RCE and TLS hostname bypasses2026-10-21T00:00:00ZMedium severity · Confirmed. Node.js shipped October security releases covering four high-severity flaws alongside medium- and low-severity fixes. The release also updates certificate trust after eMudhra. Patched vulnerabilities do not by themselves establish an intrusion.https://kuber.studio/internetonfire/#sbi-data-breachSBI customer records surface on the dark web2026-10-21T00:00:00ZMedium severity · Reported. SBI told stock exchanges that customer records had surfaced on the dark web, according to reporting. Reports distinguish more than 375,000 records from 3,897 containing personal information. The bank was still assessing authenticity and scope.https://kuber.studio/internetonfire/#signal-ringrtc-hangup-cve-2026-113380Signal call bug could keep audio flowing after hang-up2026-10-21T00:00:00ZMedium severity · Reported. Reporting describes a RingRTC flaw that could let a malicious participant continue receiving audio after the other person hangs up. Camera continuation is not confirmed. The issue concerns call shutdown, not a general break of Signal encryption.https://kuber.studio/internetonfire/#tailscale-ts-2026-013-emudhraTailscale ships update distrusting eMudhra certificates2026-10-21T00:00:00ZLow severity · Confirmed. Tailscale published an emergency update to distrust the compromised eMudhra intermediate certificates. This is a downstream certificate-trust response, not a separate Tailscale breach. WireGuard mesh traffic does not rely on that public certificate trust.https://kuber.studio/internetonfire/#north-korea-campaignUnclear North Korea campaign claim, no confirmed match2026-10-21T00:00:00ZLow severity · Unverified. The original list does not identify which North Korea-linked campaign it means. Reporting on Operation FlashHole is one possible lead, not a confirmed match to that claim.https://kuber.studio/internetonfire/#plex2shellPlex2Shell: unauthenticated RCE in Plex Media Server, exploited in the wild2026-10-20T00:00:00ZCritical severity · Confirmed. Plex confirms active exploitation of a chain of server vulnerabilities that can let an unauthenticated attacker run code. Update to 1.43.3.10861 or newer; Plex says an older internet-reachable server may already be compromised. CISA lists the four related CVEs as known exploited.https://kuber.studio/internetonfire/#safepay-ransomwareCISA/FBI: SafePay ransomware has hit 600+ victims2026-10-20T00:00:00ZHigh severity · Confirmed. A new CISA/FBI advisory describes SafePay ransomware activity and at least 600 victims across critical infrastructure sectors. The advisory is new, not the group: SafePay has operated since 2024.https://kuber.studio/internetonfire/#paloalto-ransomware-attacksRansomware gangs exploit a patched PAN-OS GlobalProtect auth bypass2026-10-20T00:00:00ZHigh severity · Reported. Reporting links multiple ransomware groups to exploitation of a patched PAN-OS GlobalProtect authentication bypass. The attacks began months before this week’s reporting; this is not a newly discovered October intrusion.https://kuber.studio/internetonfire/#emudhra-ca-key-compromiseEight eMudhra CA keys were crackable from public certificates2026-10-20T00:00:00ZHigh severity · Confirmed. Eight eMudhra intermediate certificate-authority keys were weak enough to recover from public certificates, including one with the value 4. eMudhra revoked them. Its account says none issued end-entity certificates; this is not a confirmed breach of its infrastructure.https://kuber.studio/internetonfire/#medical-paradigm-breachParadigm contractor breach hits 970,000+ Medi-Cal members2026-10-20T00:00:00ZHigh severity · Reported. Reporting says a Paradigm Healthcare Services breach affected more than 970,000 Medi-Cal members. The intrusion was detected in October 2025; notifications followed in September 2026. This is a contractor incident, not a confirmed breach of California’s own systems.https://kuber.studio/internetonfire/#http3-header-accordions-qpackHTTP/3 QPACK bug can exhaust server memory in 7 of 10 stacks2026-10-20T00:00:00ZMedium severity · Confirmed. Foxio’s research describes QPACK header-decompression amplification that can exhaust server memory. Seven of ten tested implementations were affected, with patch status varying by implementation. This is a vulnerability report, not proof that all affected servers were attacked.https://kuber.studio/internetonfire/#teamupdraft-breachTeamUpdraft breach: attackers added admins on connected WordPress sites2026-10-19T00:00:00ZCritical severity · Confirmed. TeamUpdraft confirmed unauthorised access over 17–18 October. It believes its customer database was accessed and says attackers abused UpdraftCentral connections to create admin accounts and install malicious plugins. The full extent is unknown. Connection keys were revoked; the plugin downloads themselves were not affected.https://kuber.studio/internetonfire/#cairn-ai-agents-100-companiesCairn AI agents abused for intrusions; researcher claims 100+ companies hit2026-10-19T00:00:00ZHigh severity · Reported. Norforge reports exposed dashboards showing threat actors abusing the open-source Cairn agent platform for intrusion attempts. Its researcher told press that one actor breached more than 100 companies. This is a research assessment, not a verified victim-by-victim count.https://kuber.studio/internetonfire/#ovhcloud-cli-backdoorOVHcloud CLI release binaries swapped for a credential stealer2026-10-19T00:00:00ZHigh severity · Confirmed. OVHcloud says an attacker replaced official CLI release binaries with credential-stealing malware. Versions 0.11.0–0.15.0 were affected during a roughly 94-minute window on 19 October; 0.16.0 was not.https://kuber.studio/internetonfire/#tidb-cloud-breachPingCAP: attackers copied TiDB Cloud data and source code2026-10-19T00:00:00ZHigh severity · Disputed. PingCAP confirms unauthorised access to internal cloud resources between 9 September and 7 October, including copied data and source code. The breach is confirmed, but claims about plaintext keys and the full customer impact are disputed or unresolved.https://kuber.studio/internetonfire/#opencode-api-keys-distillation-attackOpenCode breach exposes users' AI provider keys2026-10-19T00:00:00ZHigh severity · Confirmed. OpenCode confirmed a security breach affecting 1.4% of Console users during a large-scale attack. Reporting says stored keys for linked AI providers were exposed and some users saw unauthorised charges. The official post confirms the breach, not an audited total of financial losses.https://kuber.studio/internetonfire/#siemens-software-centerSigned Siemens Software Center client abused to side-load malware2026-10-19T00:00:00ZHigh severity · Confirmed. Attackers are abusing a DLL side-loading flaw in the signed Siemens Software Center client through ClickFix lures. Siemens says its systems and update channel were not breached.https://kuber.studio/internetonfire/#ahold-delhaize-cyberattackAhold Delhaize cyberattack knocks out websites, apps and deliveries2026-10-19T00:00:00ZHigh severity · Reported. Ahold Delhaize took systems offline after detecting malicious activity, disrupting websites, apps and deliveries. Stores remained open. Its 19 October update reported recovery progress and no evidence then of sensitive data theft.https://kuber.studio/internetonfire/#connectwise-cloud-backupConnectWise backup credentials used to sign into 300+ Microsoft 365 tenants2026-10-16T00:00:00ZCritical severity · Confirmed. Compromised ConnectWise Cloud Backup application credentials enabled unauthorized Microsoft 365 sign-ins. Huntress saw sign-in activity in almost 1,000 tenants, over 300 successful; these are sign-in counts, not proven data-theft counts. Affected tenants need application-credential and audit review.https://kuber.studio/internetonfire/#california-ets-student-data-breachETS breach exposes three school years of California student records2026-10-16T00:00:00ZHigh severity · Confirmed. California’s education department notified families about files copied from testing contractor ETS. The records span three school years and include sensitive student information. The copying happened between May and September, not during this week’s reporting.https://kuber.studio/internetonfire/#rankmath-pro-malwareRank Math PRO 3.0.123 shipped with a self-reinstalling backdoor2026-10-16T00:00:00ZHigh severity · Confirmed. The official Rank Math PRO 3.0.123 download contained malware during an 11-hour window on 15–16 October. The vendor released clean version 3.0.124 and published recovery guidance. The free WordPress plugin was not affected.https://kuber.studio/internetonfire/#zeabur-breachZeabur breach: 3.2M environment variables read; platform shutting down2026-10-15T00:00:00ZCritical severity · Confirmed. Zeabur confirms attackers read 3,218,965 environment-variable records and data for 321,810 accounts, among other affected systems. It revoked credentials and urges secret rotation and migration. Some services begin shutting down Dec 1; all dedicated servers and shared clusters stop by Dec 31, 2026.https://kuber.studio/internetonfire/#aomei-update-hijackAOMEI Backupper updates hijacked to deliver malware to selected users2026-10-15T00:00:00ZMedium severity · Confirmed. Google’s threat researchers found brief tampering with AOMEI Backupper update infrastructure that redirected selected users to malware. The attacks happened between April and July; the research was published in October.https://kuber.studio/internetonfire/#nginx-october-2026-advisoriesNGINX patches five medium-severity bugs2026-10-14T00:00:00ZMedium severity · Confirmed. NGINX’s October release fixed five newly published security advisories. The vendor rates all five medium, not critical. One concerns HTTP/3; this is distinct from the separate Header Accordions research.https://kuber.studio/internetonfire/#tensorlake-npm-wormTensorlake npm release carried a Shai-Hulud-style worm2026-10-08T00:00:00ZHigh severity · Confirmed. tensorlake@0.5.144 was published to npm on Oct 8, 2026 carrying a Shai-Hulud-style credential-stealing worm with a destructive dead-man's switch ('hostage token'). The Register framed it as the Shai-Hulud worm's jump into AI infrastructure.https://kuber.studio/internetonfire/#ghostaction-githubGhostAction: malicious GitHub workflows target 30,000+ repos for secrets2026-10-07T00:00:00ZHigh severity · Confirmed. GhostAction injected credential-stealing GitHub Actions workflows through compromised accounts. The October wave targeted over 30,000 repositories and attempted to extract 3,174 secrets. Those target/attempt counts are not confirmed theft totals; the earlier August-September wave had 26 confirmed stolen secrets.https://kuber.studio/internetonfire/#subquery-npm-backdoor@subql/common 5.8.3 on npm steals credentials on install or import2026-10-05T00:00:00ZHigh severity · Confirmed. The @subql/common 5.8.3 npm release contained a credential-stealing payload, according to a public security report and maintainer response. It was published through the project’s release pipeline with npm provenance; provenance alone did not make it safe.