October 2026 incident roundup: Binance $6.4B theft, PHP2Shell, LiteLLM PyPI backdoor, Cursor marketplace, Railway and more
A SafeDep roundup lists 15 well-known companies and projects that disclosed security incidents in October 2026, grouped by how attackers got in: direct breach, vendor compromise, hijacked accounts and software flaws. The largest was Binance, where about $6.4 billion left wallets across 10 blockchains on October 29, attributed by TRM Labs and Chainalysis to North Korea (DPRK). Other direct breaches hit Railway, OpenCode, Fireworks AI, Capcom, TiDB Cloud (PingCAP) and SoftBank/IDC Frontier. Software supply chain attacks hit LiteLLM (PyPI), the Cursor extension marketplace and GitHub Actions. PHP appears through exploitation of the PHP2Shell flaws (CVE-2026-109618 and CVE-2026-109619), which are in CISA KEV.
Entenda a falha
A vulnerabilidade
PHP2Shell is the name given to two PHP flaws, CVE-2026-109618 and CVE-2026-109619. The articles do not say which is more severe. They say the flaws let an attacker run code on a server without logging in, so no authentication is needed. The roundup does not give the component, the affected versions or the exact fixed releases. It only says PHP shipped emergency patches on October 21 and that sites running unpatched PHP were targeted. The PHP project itself was not breached.
Como funciona
The articles do not describe how the vulnerable code path works. All they say is that an unauthenticated attacker can reach the flaw on a server running unpatched PHP and end up executing code there. The input, the component that handles it and the step where it fails are not explained, so none are described here.
Por que é vulnerável
The root cause is not given in the articles. The only technical claim is that the result is unauthenticated code execution. What the patch changes and why the flaws went unnoticed before exploitation are also not stated.
Como foi descoberta
According to the roundup, attackers exploited PHP2Shell before the patch existed, so it was a zero-day in the wild. PHP then released emergency patches on October 21, and CISA added both CVEs to its Known Exploited Vulnerabilities catalog, citing Help Net Security. The articles do not say who found the flaws or how they were reported.
Explicação gerada por IA a partir da matéria e dos artigos, em 01/11/2026 07:16.
Exploit público
Há código de exploração publicado no Exploit-DB para CVE-2026-109618. O código não é reproduzido aqui: o link leva à fonte, e a explicação foi escrita pela IA a partir do arquivo publicado.
-
PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
This script attacks PHP running under Apache mod_php (prefork) by sending crafted multipart uploads to any PHP page, abusing session upload-progress handling to corrupt memory. It needs only network access and no login, but the target must have specific settings: upload progress enabled, non-strict sessions, a low memory limit and a single worker. It leaks memory addresses via session cookies, then makes PHP run a short system command (14 bytes max). It looks like a working but fragile exploit, tuned to PHP 8.4.26 builds; the claim of all versions after 5.4 is unproven.
Detalhes técnicos
- Direct breaches: Railway (October 21) found unauthorized access to internal systems storing customer environment variables, some possibly decrypted. OpenCode (October 17) had its hosted Console breached, exposing AI provider API keys linked by 1.4% of Console users; victims reported bills of $400 to $1,700 (BleepingComputer). Fireworks AI (October 6) saw internal credentials used to read environment variables, including API keys, from evaluation jobs in a few customer accounts. Capcom (October 19) had 11.7 million records exposed, mostly emails and login metadata, and 196 account passwords changed. TiDB Cloud: from September 9 to October 7 an intruder used stolen service account credentials on PingCAP internal systems and copied account data, source code and a table of encrypted API keys. SoftBank: on October 7, ransomware encrypted a cloud region of subsidiary IDC Frontier, disrupting 495 customer organizations.
- Supply chain: On October 21, attackers used stolen GitHub tokens of three LiteLLM engineers to run the release workflow and publish LiteLLM 1.107.0 to PyPI with a credential stealer and backdoor that run each time Python starts; the wheels were live about 1 hour 40 minutes. On October 29, Cursor's marketplace served modified Claude Code extension versions 2.1.312 and 2.1.313 for about 11 hours; they added an attacker SSH key and opened a reverse tunnel, affecting at most 5,000 users. Anthropic says its systems were not compromised. On October 8, hijacked maintainer accounts added a fake "Security Audit" workflow to 345 GitHub repositories that sent Actions secrets to an attacker server (StepSecurity).
- Vendor compromise: Polymarket (October 29) received malicious JavaScript from a compromised third-party provider that drained user wallets; it will return $3.9 million. Coinbase (October 28): vendor Amplitude exposed contact data of a small group of customers. Warp (October 23): an unnamed infrastructure vendor was abused, possibly exposing agent decision logs and telemetry for about 1% of users.
- PHP: PHP2Shell allows unauthenticated code execution; attackers used it before the patch on October 21 and CISA added both CVEs to KEV (Help Net Security). The PHP project itself was not breached.
- Common theme: Six incidents (Railway, OpenCode, Fireworks AI, LiteLLM, GitHub Actions, TiDB Cloud) put secrets in attacker hands, and four of them began with previously stolen credentials.
Remediação
- Rotate credentials stored in Railway before October 21 and any keys linked to OpenCode Console.
- Keep secrets short-lived and scoped to a single job; set spend limits on AI provider keys.
- Delay installing new package versions by a day and review what dependencies run at install time.
- Patch PHP to the fixed releases; SafeDep also suggests its Package Manager Guard (pmg) to block known malicious packages.
Linha do tempo
-
October 2026 incident roundup: Binance $6.4B theft, PHP2Shell, LiteLLM PyPI backdoor, Cursor marketplace, Railway and more
ler a análise desta fonte ocultar
A SafeDep roundup lists 15 well-known companies and projects that disclosed security incidents in October 2026, grouped by how attackers got in: direct breach, vendor compromise, hijacked accounts and software flaws. The largest was Binance, where about $6.4 billion left wallets across 10 blockchains on October 29, attributed by TRM Labs and Chainalysis to North Korea (DPRK). Other direct breaches hit Railway, OpenCode, Fireworks AI, Capcom, TiDB Cloud (PingCAP) and SoftBank/IDC Frontier. Software supply chain attacks hit LiteLLM (PyPI), the Cursor extension marketplace and GitHub Actions. PHP appears through exploitation of the PHP2Shell flaws (CVE-2026-109618 and CVE-2026-109619), which are in CISA KEV.
Technical Details
- Direct breaches: Railway (October 21) found unauthorized access to internal systems storing customer environment variables, some possibly decrypted. OpenCode (October 17) had its hosted Console breached, exposing AI provider API keys linked by 1.4% of Console users; victims reported bills of $400 to $1,700 (BleepingComputer). Fireworks AI (October 6) saw internal credentials used to read environment variables, including API keys, from evaluation jobs in a few customer accounts. Capcom (October 19) had 11.7 million records exposed, mostly emails and login metadata, and 196 account passwords changed. TiDB Cloud: from September 9 to October 7 an intruder used stolen service account credentials on PingCAP internal systems and copied account data, source code and a table of encrypted API keys. SoftBank: on October 7, ransomware encrypted a cloud region of subsidiary IDC Frontier, disrupting 495 customer organizations.
- Supply chain: On October 21, attackers used stolen GitHub tokens of three LiteLLM engineers to run the release workflow and publish LiteLLM 1.107.0 to PyPI with a credential stealer and backdoor that run each time Python starts; the wheels were live about 1 hour 40 minutes. On October 29, Cursor's marketplace served modified Claude Code extension versions 2.1.312 and 2.1.313 for about 11 hours; they added an attacker SSH key and opened a reverse tunnel, affecting at most 5,000 users. Anthropic says its systems were not compromised. On October 8, hijacked maintainer accounts added a fake "Security Audit" workflow to 345 GitHub repositories that sent Actions secrets to an attacker server (StepSecurity).
- Vendor compromise: Polymarket (October 29) received malicious JavaScript from a compromised third-party provider that drained user wallets; it will return $3.9 million. Coinbase (October 28): vendor Amplitude exposed contact data of a small group of customers. Warp (October 23): an unnamed infrastructure vendor was abused, possibly exposing agent decision logs and telemetry for about 1% of users.
- PHP: PHP2Shell allows unauthenticated code execution; attackers used it before the patch on October 21 and CISA added both CVEs to KEV (Help Net Security). The PHP project itself was not breached.
- Common theme: Six incidents (Railway, OpenCode, Fireworks AI, LiteLLM, GitHub Actions, TiDB Cloud) put secrets in attacker hands, and four of them began with previously stolen credentials.
Remediation
- Rotate credentials stored in Railway before October 21 and any keys linked to OpenCode Console.
- Keep secrets short-lived and scoped to a single job; set spend limits on AI provider keys.
- Delay installing new package versions by a day and review what dependencies run at install time.
- Patch PHP to the fixed releases; SafeDep also suggests its Package Manager Guard (pmg) to block known malicious packages.