Coinwealthly💰

The internet just had one of its WORST weeks in years, and some in the cyber world are already calling it “BLACK OCTOBER.” Here’s what went down: •⁠ ⁠PHP, which runs an estimated 70% of the web’s backends, rushed out emergency fixes for 2 critical flaws. Japan’s Prime Minister personally urged businesses to patch or take their sites offline, and AWS spotted exploitation attempts 4 days before the fix even landed. •⁠ ⁠A flaw in Signal’s calling system could let the person on the other end keep LISTENING, and possibly watching, after you hang up. It’s been fixed, so update the app on every device you use. •⁠ ⁠An Indian certificate authority’s security keys were so weak that one of them was literally the number 4. Anyone holding them could have faked a trusted certificate for ANY website, and Mozilla, Google and Apple all moved to block them. •⁠ ⁠GitLab patched a perfect 10/10 severity flaw that lets attackers with no account run code on self-hosted servers. The bug had been sitting there for 12 years. •⁠ ⁠A hacker used AI agents to break into more than 100 companies, including John Deere and SharkNinja, at roughly $50 per break-in. •⁠ ⁠The FBI and CISA say SafePay ransomware has hit more than 600 critical infrastructure organizations across 4 continents since 2024. •⁠ ⁠Data on more than 5.7 million California public school students, including disability status, was stolen through a testing contractor. •⁠ ⁠Hosting platform Railway had customer secrets stolen, and researchers have tied about $371,000 in crypto thefts to the breach. •⁠ ⁠Zeabur, another hosting platform, got breached for the 2nd time in 3 months, exposing 321,810 accounts, and announced it’s shutting down for good. Half these holes were found by AI, and the other half were exploited by it. Welcome to the future. Sources: OfficeChai, Forkast, The Hacker News, BleepingComputer, Help Net Security / Writer: Julie