The developments that matter in cybersecurity and enterprise technology. Three paragraphs. Sources included.
The llm-d project announced version 1.0 on October 20, bringing new operational controls to its open source software for distributed language-model inference. According to the IBM-hosted release announcement, the release adds …
Read the briefThe PHP patching story acquired another chapter on October 23. In an update to its php2shell report, Cloudflare says the PHP project published an informational advisory for CVE-2026-115560, a related vulnerability in session …
Read the briefCloudflare announced full transaction detection and response rules for its web application firewall on October 21, making the capabilities generally available across plans, including Free. Detections correlate an HTTP request with …
Read the briefCloudflare announced a closed beta of its post-quantum GeoKey Manager on October 23, adding new cryptography to geographically restricted key management for its Data Localization Suite. The company plans general availability for …
Read the briefIn an October 21 advisory, Cisco Talos reported eight compromised eMudhra intermediate certificates whose weak private keys were trivial to recover. Talos traced the problem to an April 2025 key-generation process. It said browser …
Read the briefLiteLLM’s release pipeline was compromised on October 21, distributing malicious Python wheels and container images, according to BleepingComputer’s October 22 report. The maintainer said version 1.107.0 contained malware that …
Read the briefArista released security updates for an actively exploited vulnerability affecting on-premises VeloCloud Orchestrator deployments, BleepingComputer reported on October 22. Tracked as CVE-2026-114625, the SQL injection flaw allows …
Read the brief