
Black October 2026 — How PHP2Shell and LiteLLM Exposed the AI Open-Source Crisis
Between October 17 and 30, 2026, 14-year-old PHP2Shell RCEs, Google Brotli out-of-bounds writes, TianoCore UEFI flaws, eMudhra's single-byte CA key, and the 101-minute LiteLLM supply-chain attack detonated concurrently. Here is how frontier AI models compressed decade-old bug hunting into a single week—and pushed a 13-developer open-source foundation to the brink.
