PHP2Shell Hit Days Early, GitLab Scores a Ten, LiteLLM Poisoned

PHP2Shell was being exploited four days before disclosure, GitLab patches a CVSS 10 unauthenticated RCE reaching back to 2014, LiteLLM's release pipeline is poisoned with a stealer, Microsoft ties AI agents to the ConnectWise breach, and Node.js fixes a Brotli decoder bug with RCE potential. PHP2Shell was exploited before disclosure Amazon Threat Intelligence caught a PHP2Shell exploit attempt against its MadPot honeypots on October 17, four days before PHP's emergency release, and now says the bugs are broadly exploited by multiple actors. ELLIO saw attacks less than an hour after Chainguard published fixed images early; CrowdStrike says the only trace is a single memory-limit fatal in the web server error log. Fixed in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. CVEs: CVE-2026-109618, CVE-2026-109619 Do this today: Confirm every PHP install is on Wednesday's release, grep web server error logs for memory-limit fatals since October 17, and alert on PHP processes that spawn a shell. Sources: The Hacker News, WIRED, Krebs on Security GitLab ships a perfect-ten RCE reaching back twelve years An integer overflow in GitLab's bundled Onigmo regex engine lets an unauthenticated attacker run code on self-managed servers, affecting every release since 7.0 (2014). Instances patched on October 12 are in range again; fixes were backported to 18.11.13, 19.0.10, 19.1.9, and 19.2.9 alongside the standard releases. No exploitation reported, no workaround. CVEs: CVE-2026-110264 (CVSS 10.0); also fixed: CVE-2026-15723, CVE-2026-112212 Do this today: Upgrade every self-managed GitLab instance to this week's patch release for its branch and enable GitLab's new "Onigmo native worker crash" and "Org mode render error burst" detection rules. Source: The Hacker News LiteLLM's release pipeline poisoned with a stealer LiteLLM 1.107.0 on PyPI, Docker Hub, and GHCR shipped a credential stealer ("privcollect") launched via cook.pth plus an hourly backdoor. LiteLLM suspects GitHub CLI OAuth tokens leaked into logs of an exposed internal LiteLLM deployment; Wiz saw stolen AWS credentials validated about 4.5 hours later, consistent with LLMjacking. Do this today: Search machines, CI runners, and images for LiteLLM 1.107.0, rotate every credential those hosts could reach, block litellm[.]dev, and pin 1.106.2 by digest. Sources: The Hacker News (compromise), The Hacker News (token leak) Microsoft names the AI agents behind the ConnectWise breach Microsoft attributes the ConnectWise Cloud Backup supply chain compromise to China-aligned Storm-0940, which used the ARTEX agentic pentest framework to spray up to 2,900 sign-ins per minute and, from October 15, abused stolen ConnectWise app identities to enter customer tenants, add app credentials, and change privileged roles. Do this today: Review every ConnectWise app in your Microsoft Entra tenant, remove credentials added since October 15, and check for new privileged role members. Source: The Hacker News Node.js patches a Brotli bug with RCE potential Node.js 22.23.4, 24.22.1, and 26.12.1 fix ten flaws, led by an out-of-bounds write in the bundled Brotli decoder reachable through node:zlib or fetch() of Brotli responses. The public PoC only reached code execution on a weakened build; no in-the-wild exploitation. The release also blocks the eight compromised eMudhra intermediate keys. Node 20.x and older get no fix. CVEs: CVE-2026-106069, CVE-2026-105483, CVE-2026-105482, CVE-2026-106074 Do this today: Upgrade every Node.js service to this week's release on its line, move Node 20 or older to a supported line, and update other software that bundles Brotli (fixed in Brotli 1.2.1, 1.1.1, 1.0.10). Source: The Hacker News More from Matt: mattchapman.net Kindle: https://www.amazon.com/dp/B0HHMH88H9  Apple Books: https://books.apple.com/us/book/local-ai-on-the-mac/id6807243472 Barnes & Noble: https://www.barnesandnoble.com/w/books/1151622292?ean=2940185390764 https://mattch Support the show