ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. But those big headlines are only half the story.

Published 22-Oct-2026 20:09 UTC · First seen 22-Oct-2026 20:08 UTC

Sources

• The Hacker News · 22-Oct-2026