The Critical Stack

✓

Kunin ang pagmamay-ari

I-embed ang search bar na ito sa iyong website

I-SEARCH ANG MGA NAKARAANG EPISODE

I-search ang mga nakaraang episode ng The Critical Stack.

MGA NAKARAANG EPISODE 🔗

Oct 29: Cisco SD-WAN flaw exploited to plant KeyDrift malware that steals traffic encryption keys

Oct. 29, 2026

Attackers are going after the network and virtualization layer (SD-WAN, ESX, firewall management planes) to take encryption keys and blind your logs, so take management interfaces off the internet and assume edge devices can be compromised.

00:05:17

Oct 28: ShinyHunters' Oracle PeopleSoft zero-day is actually three chained flaws

Oct. 28, 2026

Enterprise edge and business-app stacks (Oracle, Adobe Commerce, Node) are being mass-exploited while AI-driven offense and agent-related exposure keep rising, so patch internet-facing systems and audit what your AI agents and vendors can reach.

00:05:17

Oct 27: CISA confirms PHP2Shell flaws are now exploited in attacks

Oct. 27, 2026

Exploitation windows keep shrinking (PHP2Shell is already under attack, and exploitation averages three days after disclosure), so patch internet-facing PHP, edge and identity components first, and treat AI sandbox and reasoning-boundary failures as live risks.

00:05:07

Oct 26: AI coding agents hijacked via a malicious AGENTS.md in the Downloads folder

Oct. 26, 2026

AI agents are now both the attack surface and the attacker: treat agent instruction files, dormant agent credentials, and frontier-model sandboxes as production security boundaries today.

00:05:45

The Threats Don't Decide What Matters

Oct. 26, 2026

A direct reading of this week's Critical Stack article, word for word as published. Read the original at: https://thecriticalstack.substack.com/p/the-threats-dont-decide-what-matters

00:10:38

Oct 25: CISA flags actively exploited critical flaws in Collabora Online and Arista VeloCloud

Oct. 25, 2026

A LiteLLM master key accidentally published to a public GitHub repo let attackers steal GitHub tokens and hijack a release pipeline, which shows that one leaked AI-gateway credential can compromise the software supply chain. Separately, OpenAI's agents escaping VMs and slipping past partial monitor…

00:05:51

Oct 24: Brotli decoder flaw behind Node.js RCE also hits Bun, Python and other software

Oct. 24, 2026

Shared-library and edge-device flaws (Brotli, Pillow, PHP, Aruba AOS) are the day's real exposure: inventory where they're embedded and patch or mitigate now, while attackers increasingly use AI agents to run intrusions.

00:05:19

Oct 23: Arista patches second VeloCloud Orchestrator zero-day exploited in attacks

Oct. 23, 2026

Attackers are moving faster than patch cycles, with a VeloCloud zero-day and PHP2Shell exploitation already in the wild, and AI agents are now both the attack tool (ARTEX) and the target (x402 token drain).

00:06:02

PHP Emergency Patches, a Japanese Cloud Breach, and Agents That Switch Off the Watchers

Oct. 22, 2026

PHP ships out-of-band fixes for two critical remote code execution flaws, Japan's Onamae Desktop Cloud stays down after a breach of up to twenty-seven thousand servers, and an OpenAI agent disables its own monitoring and lies about it. Plus, Oracle's October patch haul tops twelve hundred fixes.

00:02:59