~/radar / 2026-43
Patch radar, week 43/2026
The week from 19 October 2026 to 25 October 2026: what needs patching and what else mattered.
Check this week
- Microsoft Teams to get AI-powered, context-aware phishing detection
- BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
- Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
- Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
- BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
- LiteLLM Release Pipeline Hacked to Distribute Info‑Stealer Malware
- Railway Warns Developers to Rotate Secrets After Potential Breach
Security & patches
Microsoft Teams to get AI-powered, context-aware phishing detection
Microsoft will add AI‑driven, context‑aware phishing detection to Teams messages. Support teams should pilot the feature, brief users on new warnings, and ensure existing mail filters still apply to Teams traffic.
Source ↗BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
The BlackX UEFI bootkit exploits the Baton‑Drop flaw to bypass Secure Boot and load malicious drivers. Administrators should verify firmware updates, re‑enable Secure Boot policies, and monitor for unauthorized drivers.
Source ↗Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
A memory‑corruption bug in the Brotli decoder impacts Node.js, Bun, Python Brotli packages and Envoy proxies. Operators of web services and CI pipelines should upgrade the affected libraries and validate any Brotli‑compressed input.
Source ↗Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Researchers uncovered an AI‑driven intrusion framework used by ransomware affiliates. SOCs should hunt for similar C2 patterns and monitor for AI‑generated anomalies in network traffic.
Source ↗Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Ruby released patches for three Onigmo regex bugs that enabled four critical RCE flaws in GitLab. GitLab operators should upgrade Ruby to the fixed releases and verify that GitLab’s own patches are applied.
Source ↗BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
A new UEFI bootkit bypasses Secure Boot even on patched Windows systems lacking revocation updates. Windows admins must verify firmware settings, ensure revocation lists are current, and isolate potentially compromised machines.
Source ↗LiteLLM Release Pipeline Hacked to Distribute Info‑Stealer Malware
LiteLLM’s release pipeline was compromised, publishing malicious Docker images that steal credentials and secrets. Verify affected packages, remove rogue images, and rotate credentials.
Source ↗Railway Warns Developers to Rotate Secrets After Potential Breach
Railway detected suspicious activity in its environment‑variable store and urges developers to rotate all secrets immediately. Renew keys and review access logs.
Source ↗Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Arista reports a critical SQL‑injection zero‑day in VeloCloud Orchestrator that can elevate read‑only accounts to operator level. Verify patch status and tighten access controls immediately.
Source ↗Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
Onamae Desktop Cloud’s infrastructure was breached, installing malware on up to 26,739 customer VPS. VPS and cloud‑storage operators should audit their images for unknown processes, verify integrity, and consider notifying affected tenants.
Source ↗LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
LiteLLM 1.107.0 was distributed via PyPI wheels and Docker images containing a credential stealer and backdoor. Users of AI automation should uninstall the compromised package, switch to a clean source, and audit systems for any unauthorized credential use.
Source ↗Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
GitLab disclosed an unauthenticated RCE vulnerability affecting every self‑managed instance back to 2014. Operators must apply the October 21 fix immediately, even if they installed the October 12 patch, and verify their GitLab version is updated.
Source ↗China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
The ConnectWise Cloud Backup service was breached using the closed‑source ARTEX AI framework by the Storm‑0940 actor. Admins of ConnectWise backups and any AI‑driven automation should verify the October 21 patch is applied and monitor for unexpected scanning activity.
Source ↗Node.js fixes own and inherited security vulnerabilities
Node.js 22.x, 24.x and 26.x fix high‑risk bugs and guard against compromised eMudhra certificates. Update all Node.js instances promptly and verify certificate validation in your services.
Source ↗PHP issues emergency patches for critical PHP2Shell RCE flaws
PHP released emergency patches for the PHP2Shell critical RCE flaws. Only a full upgrade to the listed patch releases fully mitigates the issue – verify the PHP version on all web servers.
Source ↗Bronze Sandcastle abuses Sandboxie DLL sideloading to deploy backdoors
Researchers identified the Bronze Sandcastle threat using Sandboxie DLL sideloading to install backdoors. Audit systems for unexpected DLL loads and patch or replace vulnerable sandbox components.
Source ↗Other news
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
An accidentally published LiteLLM master key allowed theft of GitHub tokens and injection of malicious packages. AI pipeline owners should purge secrets from repos, rotate keys and audit their release workflows.
Source ↗Microsoft: Windows Server 2016 reaches end of support in January
Windows Server 2016 will stop receiving security updates after January 2027. Administrators need to plan migration to newer server releases and consider interim isolation of critical workloads.
Source ↗Quad9 Pulls Back After Censorship Ruling, Qualcomm Job Cuts
Quad9 withdrew its DNS service following a censorship ruling. Operators should verify resolver availability and switch to alternative DNS providers if needed.
Source ↗Flash Talk: First space data centers and new controller concepts
New concepts aim to boost AI compute power, while high demand and limited manufacturing push storage costs higher. Cloud‑storage and AI teams need to review pricing and capacity forecasts.
Source ↗Google Chrome adds ClickFix warnings to stop users from running malicious commands
Chrome introduces ClickFix warnings when Enhanced Protection is on, blocking users from pasting malicious code. Ensure Enhanced Protection is enabled on client browsers and brief users about the new prompts.
Source ↗New articles by e-mail
One e-mail per new article. No tracking, unsubscribe any time. As a thank-you after confirming: my “Server operations & patching” checklist (PDF).
Selected automatically and commented with AI. Please report mistakes — I withdraw entries when needed.
Weekly roundups: