PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
In October 2026, multiple organizations in Japan suffered unauthorized access incidents leading to personal information leakage. Attackers used artificial intelligence to scan for known vulnerabilities and exploit APIs, including server-side request forgery. They analyzed Android application packages and employed tools to reverse engineer Flutter apps and target various services such as web applications, MySQL databases, Jenkins servers, and email gateways. The attackers attempted to evade endpoint detection and response systems and deployed web shells to gain internal network access. The campaign also affected web services beyond Japan, indicating a wider scope of malicious activity.
An autonomous offensive agent named 'Skynet' hijacks exposed large language model (LLM) endpoints on the internet to conduct a range of attacks. It uses 74 offensive tools targeting web frameworks, credential theft, database access, and cryptocurrency mining. The agent operates unattended for extended periods by bypassing AI safety controls through jailbreak techniques. Victims include AI model owners who incur costs for computing power and compromised servers exploited for Monero mining. This activity was observed via an AI honeypot capturing the full attack sequence, highlighting a novel self-directed cybercrime targeting unauthenticated internet-facing AI services.
A vulnerability in the Snyk agent scan affecting AIOHTTP allows the Secure attribute of a shared cookie to not be enforced. This means a cookie marked as Secure could be transmitted over unencrypted HTTP connections, potentially exposing sensitive session data. The issue affects versions from 0.4.3 up to but not including 0.6.9. A patch is available to address this vulnerability.
The aiohttp server did not enforce a keepalive timeout during the initial phase of a request, allowing an attacker to keep an idle connection open indefinitely before sending any data. This vulnerability affects versions from 0.4.3 up to but not including 0.6.9. A reverse proxy with appropriate keepalive limits is recommended as a workaround. A patch is available to address this issue.
A vulnerability in AIOHTTP allows an overflow in Max-Age processing that can prevent closing of connections, leading to temporary exhaustion of the connection pool until garbage collection intervenes. This affects versions from 0.4.3 up to but not including 0.6.9. The issue does not require user interaction or privileges to exploit and has a low impact on availability.
CVE-2026-111066 is a vulnerability in aiohttp where an attacker can exhaust file descriptors by sending specially crafted multipart requests. This affects handlers using Request.post(), potentially leading to resource exhaustion. Versions from 0.4.3 up to but not including 0.6.9 are affected. A patch is available to address this issue.
This vulnerability in AIOHTTP allows an attacker to spoof the Request.scheme attribute by sending an absolute-form request. Applications relying on Request.scheme for security decisions may be tricked into misinterpreting the connection as encrypted or not. A workaround is to use a WAF rule to reject absolute-form requests, which are typically only legitimate for proxy use. A patch is available for affected versions.
A vulnerability in AIOHTTP allows a subdomain to remove the Host-Only flag from an existing cookie set for a parent domain. This could reduce cookie security protections for users accessing untrusted subdomains. The impact is limited because most use cases do not reflect these cookies back to a browser.
AIOHTTP's pure-Python HTTP parser is vulnerable to an HTTP request smuggling attack when the Python parser is used instead of the default C parser. This affects versions from 0.4.3 up to but not including 0.6.9. The vulnerability can be mitigated by switching to the default C parser.
Multiple vulnerabilities in aiohttp versions 0.4.3 up to but not including 0.6.9 can lead to excessive or unbounded memory and CPU usage triggered by attacker-controlled requests. This can cause resource exhaustion on affected systems.
OshoosiClaw v1.2.0 is an open source decentralized, autonomous Endpoint Detection and Response (EDR) and AI agent containment engine written in Rust for Linux and Windows. It operates locally with kernel and hardware boundary enforcement, aiming to defend against advanced attack techniques such as kernel callback blinding and AI agent breakouts. The project is actively seeking developers and penetration testers to evaluate its security by attempting various attack methods and to contribute improvements. No known exploits or vulnerabilities have been reported at this time.
This is a security update for the jackson-core component provided by SUSE Product Security Team. It is functionally equivalent to the Red Hat advisory RHSA-2026:86706. No specific affected versions or detailed vulnerability information is provided in the input data. The severity is assessed as medium.
The npm package '@platform-services/hrm-mfe-core' version 99.9.1 is identified as malicious. It declares a dependency on itself using a URL pointing to an external S3 bucket (puffnetwork.com) rather than a standard registry version. This setup allows arbitrary code from the external source to be executed during installation without version pinning or integrity verification. The package also communicates with a domain linked to malicious activity.
The npm package 'fanarena-common' version 99.9.1 declares a dependency on 'ltidisafe' fetched directly from an external HTTPS URL rather than the npm registry. This external source lacks integrity checks and publisher verification, allowing the remote host to change the code executed during installation at any time. The package has been identified as malicious due to communication with a domain linked to malicious activity.
This entry references a security update for SUSE related to dotnet10.0, providing a functional equivalent of Red Hat advisory RHSA-2026:86193. The update addresses multiple CVEs listed in the tags but does not specify affected versions or detailed vulnerability descriptions. The severity is marked as critical, but no CVSS score or detailed technical information is provided.
The npm package @decoopus/claude-setup contains malicious code that intercepts and exfiltrates Anthropic API keys and user data by redirecting requests to an attacker-controlled gateway. It modifies Claude Desktop configurations across multiple platforms, kills running Claude processes, deletes session and storage data, and forces re-authentication through the malicious gateway. The package also includes fabricated model names to mislead users. Any system with this package installed should be considered fully compromised.
A denial of service vulnerability (CVE-2026-91777) affecting the jackson-databind component of the Jackson Data Processor has been identified and addressed by Red Hat. The issue involves a quadratic forward-reference completion that can lead to denial of service. Red Hat has released security updates for Red Hat Enterprise Linux 9 and related variants to remediate this vulnerability.
Node.js HTTP client library undici versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1 contain a vulnerability in the decompress interceptor. This interceptor forwards decompressed response data from zlib stream event callbacks without catching exceptions thrown asynchronously. As a result, if a downstream handler throws an exception asynchronously (e.g., the built-in dump interceptor when a response exceeds its maximum size), the exception is uncaught and terminates the Node.js process. A malicious or compromised HTTP server can exploit this by sending a small compressed response that decompresses to a size exceeding the limit, causing a client crash. The issue is fixed in versions 7.30.1 and 8.12.2 and later.
