Abandoned Popcorn Time app exposed millions of devices to RCE attacks
2026-10-24T01:23:21Z•03602079e1b49825c4de2f7d43e2792167ac75011fa88e2df7c3bc3b4687a02e
AI-agent-securityArubaOSGitLabLiteLLMPHPVeloCloud-Orchestratoractive-exploitationcredential-theftdata-breachend-of-supportmalwarephishingremote-code-executionsupply-chain-compromisevulnerabilitieszero-day
What happened
A BleepingComputer security-news feed covering critical vulnerabilities, active exploitation, supply-chain compromises, data breaches, unpatched RCEs, end-of-support risks, and emerging AI-agent security threats. Notable items include an actively exploited VeloCloud Orchestrator zero-day, maximum-severity GitLab and ArubaOS vulnerabilities, PHP2Shell exploitation before patch availability, and a compromised LiteLLM release pipeline distributing credential-stealing malware.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 03602079e1b49825c4de2f7d43e2792167ac75011fa88e2df7c3bc3b4687a02e
- Enrichment time
- 2026-10-24T01:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.