Privacy & SecurityNews
Microsoft said on October 21, 2026 that it assesses Storm-0940, which it calls a China-state aligned actor, was behind the ConnectWise Cloud Backup compromise and used the ARTEX AI framework.
Privacy & SecurityNews
LiteLLM signs images from v1.103.8 (October 24, 2026) with a new cosign key, e82a3c6. Older images, including v1.106.2, still need the old 0112e53 key. Its postmortem also revises the cause.
Privacy & SecurityNews
CVE-2026-111497, an out-of-bounds write in the Brotli decoder, is fixed in new Brotli, Node.js, Bun, Envoy and Istio releases. The fixed versions and how to check what you run.
Privacy & SecurityNews
A malicious LiteLLM 1.107.0 was published to PyPI and Docker on October 21, 2026 with a credential stealer. LiteLLM says to pin 1.106.2, remove the malware and rotate keys.
Privacy & SecurityNews
PHP fixed CVE-2026-109618 and CVE-2026-109619, two critical flaws, on October 21, 2026. OpenAI says its Patch the Planet coalition helped coordinate. Affected versions and what to do.
From the team behind DotsBot
Outbound for Mac
See every server your Mac talks to, and block the ones you don't want.
Get Outbound