10.22.26 | PHP security release strengthens security, Meta ordered to pay $25B, No easy PHP vulnerability exploit

This is a recap of the top 10 posts on Hacker News on Oct 22, 2026. Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights (00:00) - Intro (00:18) - Today's PHP security release, and how we're strengthening security (01:38) - Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case (02:38) - There isn't an easy exploit for this PHP vulnerability (03:44) - Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (05:01) - mitmproxy adds --emudhra option (06:10) - Security Disclosure (07:14) - DuckDB 2.0.0 LTS “Cinnamon Teal” (08:25) - Claude Duet (09:29) - GitLab critical patch release (10:40) - PingCap TiDB Leaks (12:02) - Outro Today's PHP security release, and how we're strengthening security https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/ https://news.ycombinator.com/item?id=50182987 Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html https://news.ycombinator.com/item?id=50184820 There isn't an easy exploit for this PHP vulnerability https://eliastaylor.com/noexploit/ https://news.ycombinator.com/item?id=50188948 Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/ https://news.ycombinator.com/item?id=50181114 mitmproxy adds --emudhra option https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b https://news.ycombinator.com/item?id=50189232 Security Disclosure https://blog.railway.com/p/security-disclosure-wednesday-october-21st https://news.ycombinator.com/item?id=50188228 DuckDB 2.0.0 LTS “Cinnamon Teal” https://duckdb.org/2026/10/21/announcing-duckdb-200 https://news.ycombinator.com/item?id=50181136 Claude Duet https://claude.com/product/claude-duet https://news.ycombinator.com/item?id=50186037 GitLab critical patch release https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/ https://news.ycombinator.com/item?id=50185869 PingCap TiDB Leaks https://fulcrumsec.vg/pingcap/ https://news.ycombinator.com/item?id=50173716