October 30, 2026
Mistral Ships Open Weights but Bans Model-as-a-Service; Apple's Git Still Trusts a Compromised Certificate
Hacker NewsLobstersTech Trends DailyMistral Large 4
#php2shell
3 articles · All tags
📰 Digests
October 25, 2026
A Brotli Out-of-Bounds Write Patched in February Without Security Tagging Spreads from Node.js to Python, C++, and Envoy, Turning "HTTP Compression On by Default" into an Industry-Wide Patch Window; Meanwhile National Bodies Vote Down C++26, and Roku Migrates Repos to GitLab with a Warning That Search Indexes Expire Silently — Today's Breakages Stem from Overlooked Defaults
BrotliCVE-2026-111497node2shellhttp2shell
October 22, 2026
A Single OOM Request Unlocks Unauthenticated RCE in PHP: Two CVEs Traced Back to 5.4.0 Leave Default WordPress, Drupal, and MediaWiki Vulnerable as Chainguard Breaches Embargo Six Hours Early; Railway Env Vars Exfiltrated and LiteLLM Backdoored
php2shellCVE-2026-109618CVE-2026-109619PHP 8.2.35