Cyberattack wave hits PHP, Node.js, Binance, LiteLLM
Original title: Hacktober – Cyberattack Wave Hits PHP, Node.js, Binance, LiteLLM, Pentagon, and a Few More
Binance reports multibillion-dollar wallet drain while PHP and Node.js vulnerabilities require patching.
October brought multiple cybersecurity incidents including Binance's multibillion-dollar wallet drain, Polymarket's credential theft, Coinbase vendor exposure, PHP2Shell vulnerabilities, Node.js updates, and LiteLLM supply chain compromise. The events highlight risks from compromised credentials and malicious software updates but were not part of one coordinated campaign.
Unconfirmed: Whether the total losses from Binance will be recovered is still being determined
- Binance impact estimated at $6.3 billion with $3 billion frozen
- PHP2Shell involves CVEs CVE-2026-109618 and CVE-2026-109619
- Node.js 10 vulnerabilities fixed in versions 22.23.4, 24.22.1, 26.12.1
- LiteLLM 1.107.0 contains credential stealer and remote access malware
- Polymarket linked to $2.7 million in withdrawals
- Products
- wallet
- Malware
- credential stealer
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-109618+1 related CVE | OOM longjmp memory flaw enabling RCE in PHP | 9.2 | 100% | KEVPoC ×25 | KEV |
From the original article
8 min read at cybersecuritynews.com
October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software packages, government records, and grocery chains. Binance investigated billions of dollars in unauthorized transactions, PHP issued emergency fixes, and a malicious LiteLLM release put developer credentials at risk.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.