087 - AI Hacking Is Here: Black October

A wave of cybersecurity disclosures has made this week feel like a turning point, with people calling it "Black October." This episode treats it as a cluster of high-impact incidents, not proof that one AI-driven campaign caused them all, and separates where AI was directly involved from where the failures were conventional. PHP2Shell tops the list: two critical PHP vulnerabilities affecting a huge share of the web's software, which researchers at Wiz used frontier AI models to help find and patch, with fixes released October 21. Amazon separately reported seeing an exploitation attempt in its honeypot telemetry on October 17, four days before public disclosure. The same week, LiteLLM disclosed that attackers used a stolen GitHub OAuth token to compromise its release pipeline, publishing a malicious version 1.107.0 package and matching Docker images loaded with credential-stealing malware for roughly two hours before containment — a textbook supply-chain attack that tampers with software customers already trust rather than breaking in individually. Developer infrastructure took more hits: Railway disclosed that an unauthorized party may have accessed and decrypted some encrypted environment variables, and told customers to rotate secrets; Zeabur suffered its second breach in two months, exposing data tied to more than 321,000 accounts and roughly 3.2 million environment-variable records, and announced it will shut down by year's end; and GMO's Onamae.com Desktop Cloud in Japan reported unauthorized access potentially affecting over 26,000 servers. Beyond infrastructure, Educational Testing Service disclosed a breach exposing personal information on millions of California students, eMudhra's compromised certificate keys forced browser makers to block affected certificates, and GitLab, NGINX, Ahold Delhaize, and Bullhorn all had their own separate incidents the same week. The most direct AI story is Cairn, an open-source agent-coordination platform that security researchers say was abused by multiple threat actor clusters to automate reconnaissance and attacks, with one campaign reportedly linked to over 100 companies. The episode's throughline: AI is accelerating parts of both attack and defense, but the underlying causes — stolen credentials, weak keys, unpatched software, and excessive access — are the same ones that have always decided the outcome, and the practical response is unglamorous: patch fast, rotate secrets, verify releases, and restrict access. Sources & References SecurityToday: Black October: Many attacks had been running for months — https://www.securitytoday.de/en/2026/10/22/black-october-many-attacks-had-been-running-for-months/ Amazon Web Services Security Blog: Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot — https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/ Wiz Research: PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet — https://www.wiz.io/blog/php2shell-php-rce LiteLLM: Contained: Oct 21, 2026 LiteLLM release v1.107.0 Compromised — https://docs.litellm.ai/blog/security-incident-oct-21-2026 Railway: Security Disclosure: Wednesday October 21st — https://blog.railway.com/p/security-disclosure-wednesday-october-21st Zeabur: October 2026 security incident (preliminary report) — https://dash-new.zeabur.com/blogs/october-2026-security-incident Zeabur: Zeabur is shutting down: what happens next — https://zeabur.com/blogs/zeabur-is-shutting-down Mozilla Security Blog: Protecting Firefox users following the compromise of eMudhra intermediate certificates — https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/ Voice narration is AI-generated.