A honeypot operator has confirmed working PHP2Shell shells against mod_php, Fortinet has shipped AI-found FortiOS fixes ahead of a 10 November disclosure, and a token-abuse campaign called Gheist is dumping GitHub Actions secrets.
An exploited Collabora CODE app in KEV, a third PHP session bug, the Brotli flaw reaching Python and Envoy, an Okta Access Gateway chain, and 72 ArubaOS fixes.
An exploited VeloCloud SQL injection, a Node.js Brotli bug with a working RCE demo, a now-reliable PHP2Shell exploit, and Railway’s secrets breach.
LiteLLM shipped a backdoored release, PHP2Shell attempts predate disclosure, GitLab fixed a CVSS 10, and Oracle issued an out-of-band Java fix.
PHP fixed the leaked PHP2Shell bugs, eight eMudhra intermediate keys were recovered and an emSign root is being pulled, and CISA added six exploited CVEs.