OVHcloud CLI and Railway Incidents: Which Secrets to Rotate
The OVHcloud CLI was swapped for a stealer and Railway exposed environment variables. Learn who is affected and how to rotate secrets after each incident.
0 Comments
October 25, 2026
LiteLLM 1.107.0 Was Backdoored: How to Check and Clean Up
LiteLLM 1.107.0 on PyPI and Docker Hub carried a credential stealer on 21 Oct 2026. Check if you installed it, clean up safely and rotate the right secrets.
October 25, 2026
GitLab CVE-2026-110264: Patch Self-Managed GitLab Now
CVE-2026-110264 is a CVSS 10 GitLab flaw affecting every self-managed version since 7.0. Check your version, upgrade safely and spot attack attempts.
October 24, 2026
Nextcloud CVE-2026-110447: Built-in CODE Server Exploited
CVE-2026-110447 lets attackers plant web shells via Nextcloud's Built-in CODE Server app. Check your version, update or remove it, and hunt for compromise.
October 24, 2026
Plex2Shell: Plex Media Server Under Attack, Update Now
Plex2Shell lets attackers take over unpatched Plex Media Server installs without a login. Check your version, update and look for signs of malware.
October 24, 2026
UpdraftPlus / UpdraftCentral Backdoor: How to Check and Clean Your WordPress Site
Stolen UpdraftCentral keys were used to backdoor WordPress sites from 18 October 2026. Who is affected, how to update and delete keys, how to detect the backdoor and how to clean up.
October 23, 2026
SBI Data Leak 2026: What Was Exposed and How to Protect Yourself from Scams
SBI disclosed a suspected exposure of customer data on the dark web. What was exposed, what was not, the scams to expect, and 8 steps to protect your money.
October 23, 2026
eMudhra Certificate Compromise: Is Your Website Affected and What to Do (2026)
Eight eMudhra intermediate CA keys were trivially weak and browsers are removing the emSign ECC Root CA – G3. Who is affected, how to check your certificate chain, and what to update.
October 23, 2026
How to Build a SOC Home Lab on Linux with Wazuh SIEM (2026 Guide)
Build a free SOC home lab with Wazuh 4.14: lab design, all-in-one install, connecting Linux and Windows agents, safe detection tests, file integrity monitoring and analyst skills to practise.
October 23, 2026
How to Self-Host n8n on Linux with Docker Compose, PostgreSQL and HTTPS (2026)
Set up a production-ready self-hosted n8n on Linux: Docker Compose, PostgreSQL 18, automatic HTTPS with Caddy, a first workflow, backups, updates and a security checklist.
October 23, 2026