Cybercrime and Incidents

CISA’s KEV listing identifies CVE-2026-109619 in PHP as actively exploited; the supplied advisory gives no affected versions or patch details.

• Hack'n Jill Team
• October 27, 2026

Cloudflare reported 155 cross-customer responses from a hosted AI model, as a separate audit found AI-generated submissions overwhelming bug triage.

• Hack'n Jill Team
• October 27, 2026

DreamHost says affected account owners must reset passwords for some mail and FTP/SFTP users. Its File Manager remains unavailable.

• Hack'n Jill Team
• October 26, 2026

PHP fixed two critical remote code execution flaws on Oct. 21, 2026, after researchers traced a related memory-handling problem back to 2004.

• Hack'n Jill Team
• October 22, 2026

Railway says customer environment variables may have been accessed. The incident highlights why AI keys can be valuable and what remains unknown.

• Hack'n Jill Team
• October 22, 2026

A cluster of security disclosures highlights risks in software runtimes, certificate keys, cloud data, packages and AI-enabled attacks.

• Hack'n Jill Team
• October 22, 2026

Dutch government sites like Overheid.nl and DigiD taken offline after PHP exposes critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619.

• Hack'n Jill Team
• October 22, 2026

TeamUpdraft says attackers accessed customer data and used UpdraftCentral keys to install backdoors. The patch revokes some keys, but cleanup is separate.

• Hack'n Jill Team
• October 20, 2026

Federal prosecutors say an OpenAI engineer hid a recording device in an executive conference room. He is charged and remains in custody.

• Hack'n Jill Team
• October 14, 2026

Ledger says reports of unexpected crypto losses involved devices sold by Southeast Asian reseller CryptoBilis; the tampering method and full scope remain unclear.

• Hack'n Jill Team
• October 14, 2026