Abandoned Popcorn Time app exposed millions of devices to RCE attacks
2026-10-24T07:23:21Z•34f7531f2784555ded18f3b0c6cd242b8e5e5025bc94e8ff5bcd28da79766099
ArubaOSGitLabLiteLLMPHPVeloCloud-OrchestratorWindows-Server-2016active-exploitationcloud-securitycredential-theftdata-breachinformation-stealermalwarephishingremote-code-executionsupply-chain-compromisevulnerabilitieszero-day
What happened
BleepingComputer security news feed covering major vulnerabilities, active exploitation, supply-chain compromises, data breaches, phishing defenses, and end-of-support announcements. Key items include actively exploited VeloCloud Orchestrator and PHP2Shell vulnerabilities, critical ArubaOS flaws, a maximum-severity GitLab code execution issue, and a compromised LiteLLM release pipeline distributing information-stealing malware.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 34f7531f2784555ded18f3b0c6cd242b8e5e5025bc94e8ff5bcd28da79766099
- Enrichment time
- 2026-10-24T07:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.