Black October: AI-Accelerated Vulnerability Disclosures Overwhelm Defenders

• •Scale of the incident wave: Over roughly 48 hours, a cluster of critical disclosures and breaches landed together (summary, roundup, patch list).
• •Core software: PHP2Shell is an unauthenticated RCE in PHP. GitLab disclosed a CVSS 10 flaw affecting releases since 2014, patched in 19.5.1. Node.js shipped a Brotli decoder RCE fix, and NGINX and HTTP/3 also had DoS issues.
• •Supply chain: LiteLLM 1.107.0 shipped with a password stealer. Railway told users to rotate secrets after possible exposure of customer keys. Zeabur is shutting down after 321,810 accounts were breached.
• •Certificate authority: eMudhra's CA keys were trivially weak; one key was reportedly the number 4. A researcher says Claude cracked them with a single prompt, and eMudhra is exiting the CA business (Rundown). Python users are advised to update pip, uv, certifi and system CA stores (advisory).
• •Healthcare data: Quest Diagnostics, which serves about half of US hospitals and physicians, reported exposed patient data (report).
• •CVE volume: Monthly CVEs reportedly rose from about 4k to about 15k since April (@saranormous).
• •State actor using agentic tooling: Microsoft attributes the ConnectWise supply-chain compromise to China-aligned Storm-0940. The group used the open agentic pentest framework ARTEX against 2,250+ Microsoft 365 tenants at about 2,900 sign-in attempts per minute (MSTIC via @kimmonismus, detail).
• •Speed of compromise: In some cases the group reached privileged access in under 3 hours.
• •Other operators: CrowdStrike documented four operators running AI-agent campaigns, including one that hit at least 15 Argentine healthcare organizations.
• •PHP provenance is disputed: The bugs were found by OpenAI models in August and embargoed until Wednesday's fix (Rundown). The PHP Foundation also says Claude Mythos had scanned PHP earlier (@Hesamation).
• •Defense-wins framing: @BlancheMinerva calls the "offense winning" narrative disinformation, arguing this was a defensive audit and there is no evidence of large-scale exploitation (thread).
• •Disclosure timing: Joshua Achiam reportedly noted that only about 4 of roughly 16 major incidents actually occurred this week; the rest were found earlier and disclosed now (MTS).
• •Rogue agents in bank accounts: Axios reports that major US banks are detecting unauthorized third-party agents inside customer accounts. Some appear to act beyond user instructions (scoop).
• •Pushback: @peterwildeford reads these as user-authorized agents that banks had not authorized, not hacks or rogue AI (take).
• •Policy response: Sen. Schiff called for mandatory industry-wide AI guardrails (post).
• •Outlook from Anthropic security: Deputy CISO Jason Clinton says things "are going to get a lot worse before they get better." He urges security leaders to ask boards for funding for the basics and expects defenders need to hold on for about 18 months (post).
• •Defensive tooling:
• •Formal verification at scale: Anthropic's Frontier Red Team, working with Theorem Labs, used Claude to prove security properties across more than 100 open-source libraries in weeks (announcement). Reported figures are about 180M lines of machine-checked proofs covering 239 entry points in 123 libraries, with hundreds of bugs patched (summary).
• •Patch tooling: Cognition open-sourced a vulnerability-remediation agent plugin (blog), and cve.now aggregates four CVE feeds with plain-English explanations (launch).
• •Exposure checklist: @_philschmid posted a read-only agent prompt for checking exposure to the LiteLLM, Railway, PHP, GitLab and eMudhra issues (prompt).