The Good, the Bad and the Ugly in Cybersecurity - Week 44 (2026)
SentinelOne, Friday, October 30th, 2026
SentinelOne's Week 44 roundup covers PHP2Shell exploitation, other vulnerabilities, a LiteLLM supply chain attack and law enforcement actions.
The week's disclosures included flaws in PHP2Shell, Node.js, GitLab and Brotli, a software supply chain attack on LiteLLM and compromised certificate authority keys at eMudhra.
SentinelOne says PHP2Shell is hard to exploit at mass scale because heap layouts and worker states vary by PHP version, build and configuration, though targeted compromises have occurred.
CISA added both PHP2Shell CVEs to its Known Exploited Vulnerabilities catalog with an October 29 federal deadline.
The roundup also covers international law enforcement actions against cybercrime groups, including the transfer of a Chinese national from the Netherlands to California over an alleged cryptocurrency fraud.