Let's Talk About Black October
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Black October, a cluster of serious security disclosures between October 19 and 22, 2026, included the PHP2Shell remote code execution flaws, a Brotli decoder bug, and a compromised eMudhra certificate authority whose weak keys could be recovered from public certificates.