https://rootnotes.in/article/litellm-the-provenance-was-signed-and-it-named-the-wrong-repository Root Notes en 2026-10-22T07:33:24.220Z LiteLLM's compromised build shipped with signed provenance. It said the source was a repository one hyphen off the real one https://rootnotes.in/article/sbi-six-hours-to-the-regulator-and-no-duty-to-tell-you-until-2027 Root Notes en 2026-10-22T07:18:48.053Z SBI had six hours to tell two regulators and five days to tell its shareholders. Nothing requires it to tell the customers https://rootnotes.in/article/signal-ringrtc-the-fix-is-seven-weeks-old-and-signal-never-mentioned-it Root Notes en 2026-10-22T07:14:43.897Z Signal fixed this calling flaw on 4 September. The 9.3 score, the CVE and the coverage all arrived six weeks later https://rootnotes.in/article/php2shell-ai-found-them-first-and-then-the-identifiers-leaked Root Notes en 2026-10-22T05:40:33.638Z AI found the PHP flaws before attackers did, the industry got a head start, and a leak of the CVE numbers ended it a day early https://rootnotes.in/article/tor-333-exit-relays-and-the-warning-everybody-clicks-through Root Notes en 2026-10-22T05:40:22.617Z 333 Tor exit relays were rewritten to intercept SSH, and the only thing between you and it was a host-key warning https://rootnotes.in/article/storm-0940-the-loud-half-failed-completely-and-the-quiet-half-worked Root Notes en 2026-10-22T05:39:59.498Z Microsoft says 151,000 password attempts against ConnectWise victims succeeded exactly zero times. The part that worked made no sign-in at all https://rootnotes.in/article/nginx-eleven-cves-and-your-exposure-is-three-directives Root Notes en 2026-10-20T11:40:45.092Z F5 patched eleven NGINX flaws out of band, and whether three of them reach you comes down to single directives https://rootnotes.in/article/nikkei-1-83-million-records-and-what-is-actually-in-them Root Notes en 2026-10-20T11:40:33.907Z Nikkei says 1.83 million records were exposed. About 150,000 of them contain a person's details https://rootnotes.in/article/ovhcloud-cli-the-releases-you-already-had-were-rewritten Root Notes en 2026-10-20T11:40:25.533Z The OVHcloud CLI attack did not ship a bad new version. It rewrote five releases that already existed https://rootnotes.in/article/plex2shell-patched-in-august-exploited-the-day-after-the-proof-of-concept Root Notes en 2026-10-20T09:13:33.212Z Plex patched this in August. Attacks started on 17 October, the day after somebody published the exploit https://rootnotes.in/article/the-openai-recording-device-case-is-built-on-prompt-logs Root Notes en 2026-10-20T09:13:23.874Z The OpenAI bugging case is built substantially on chatbot prompts, which is a new kind of evidence https://rootnotes.in/article/rank-math-pro-the-version-number-cannot-tell-you-whether-you-are-infected Root Notes en 2026-10-20T09:13:15.063Z Rank Math PRO shipped a backdoor for eleven hours, and the version number is the same either way