AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours
2026-10-28T07:23:52Z•3273c770fa7d1b20c540cc041cc647925556deb019bf44b38224027beef4e1a4
AI-assisted attacksCISA KEVEPICSGitLabLiteLLMPHPPHP2Shellactive exploitationcertificate authority compromisecloud securitycredential theftcritical infrastructuredata breachindustrial control systemsremote code executionsupply-chain attack
What happened
Security news roundup covering active exploitation of critical PHP vulnerabilities (“PHP2Shell”), including remote code execution, widespread scanning, government service disruptions, and emergency patches. Other notable incidents include a LiteLLM supply-chain compromise exposing secrets, a maximum-severity GitLab remote-code-execution flaw, compromised certification-authority keys enabling website impersonation, EPICS industrial-control vulnerabilities, cloud-tenant compromise, and multiple data breaches. The most urgent themes are vulnerabilities under active exploitation and supply-chain/ด
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- 3273c770fa7d1b20c540cc041cc647925556deb019bf44b38224027beef4e1a4
- Enrichment time
- 2026-10-28T07:23:52Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.