Epic
Black October (information security)
October 2026 in information security
Black October (information security)
In information security, October 2026 has been referred to as Black October due to several major security incidents and vulnerability disclosures. The events drew attention to the growing use of artificial intelligence in vulnerability research and the potential consequences for widely deployed software and internet infrastructure. The events included the disclosure of the PHP2Shell vulnerabilities, a software supply chain attack affecting LiteLLM, and the compromise of intermediate certificate authority keys operated by eMudhra. A separate security release for Node.js addressed several vulnerabilities, including a potentially exploitable flaw in its Brotli decompression implementation. Additionally, a severe vulnerability in GitLab was fixed and made public.
Open boosters, collect cards and trade them. Free to play.
Play for free