{
  "id": 16085607,
  "title": "ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More",
  "url": "https://urgent.news/2026/10/22/threatsday-ai-secrets-leak-pingcap-source-theft-signal-hang-up-flaw",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-22T17:45:44.000Z",
  "source": {
    "name": "The Hacker News",
    "slug": "the-hacker-news",
    "url": "https://thehackernews.com/2026/10/threatsday-ai-secrets-leak-pingcap.html"
  },
  "original_language": "en",
  "account": "This week has been a rough one for cybersecurity, with a slew of threats and vulnerabilities making headlines. PHP and GitLab Remote Code Execution (RCE) flaws, Linux security bugs, compromised eMudhra certificates, and a Node.js RCE flaw have all been reported. Additionally, there have been incidents involving hijacked Tor relays, stolen passwords, exposed databases, and broken login checks.\n\nBluesky, a social media platform, has acknowledged a phishing attack that compromised over 4,500 accounts. The attack involved posts promoting a fake government payment offer. The platform has temporarily suspended the affected accounts and is working to recover access for users.\n\nThe Singapore Police Force has warned users about a malware-enabled scam targeting senior citizens. Victims were lured through social media advertisements for senior-focused activities, water-based fitness programs, and recycling initiatives. The scam led to S$989,000 in losses.\n\nAndromeda discovered that one of its employees inadvertently exposed credentials in October 2026. No further unauthorized activity has been observed since the incident.\n\nRoundcube, an email server, released versions 1.6.20 and 1.7.5 to address security issues, including IMAP command injection, SSRF filter bypass, and unsafe attachment handling.\n\nGenesys disclosed a cybersecurity incident involving unauthorized access to certain internal business systems, including a learning management system and a customer relationship management platform. However, the company's Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not compromised.\n\nA security flaw in the NVIDIA AIStore for Linux, CVE-2026-65162 (ShadowForge), has been disclosed. This flaw allows privileged container creation and host-level compromise.\n\nDutch police have arrested two suspects in a bank helpdesk fraud scheme that involved 170 victims and €380,000 in losses. The fraudsters used AI-generated audio clips to impersonate bank representatives and trick victims into transferring money or disclosing sensitive information.\n\nLaravel has patched a critical security vulnerability (CVE-2026-114509) that allowed its TokenGuard to be bypassed, enabling unauthenticated attackers to authenticate as arbitrary existing users without needing their API tokens. The issue has been resolved in versions 13.29.0 and 12.68.0.",
  "summary": "This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. And the week isn't even over yet. But those big headlines are only half the story. Stolen passwords, exposed",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}