https://codemarine.ai/brief/ Software supply chain and cyber threats in plain English: what got hit, who is exposed and what to patch. en Sat, 31 Oct 2026 00:00:00 GMT https://codemarine.ai/brief/2026-10-31/ https://codemarine.ai/brief/2026-10-31/ Sat, 31 Oct 2026 00:00:00 GMT If you run a WordPress site, update it to version 7.1.4 today; attackers are already trying to break in during updates. If your company uses Ivanti VPNs for remote access, ask IT to install Ivanti's latest update straight away. If you use Cursor with the Claude Code add-on, check its version; anyone who got version 2.1.313 should treat that computer as hacked and change their passwords and keys. If your apps run on Northflank, change every password and API key stored there now, as the company says all of them may have been exposed. If your team hosts its own GitLab, make sure it has GitLab's 21 October update or later; the US government says attackers are now using a 10 out of 10 flaw. https://codemarine.ai/brief/2026-10-30/ https://codemarine.ai/brief/2026-10-30/ Fri, 30 Oct 2026 00:00:00 GMT If your team hosts its own GitLab, update it today; attackers already tried to break into one well known open-source project's server with this flaw. If your company uses Palo Alto Networks firewalls, ask IT to install this week's fix and make sure the admin page can't be reached from the internet. If you look after Linux servers, watch for a kernel update over the next few days and install it; a fix is out on Debian, SUSE, Oracle and Amazon Linux but not yet on Ubuntu or Red Hat. If your company uses Cisco firewalls for remote VPN access, ask IT to install Cisco's new update, because attackers are using a bug to knock them offline. If you code on a Mac, the git and curl that come with macOS still accept the leaked eMudhra certificates, so keep the manual fix in place. https://codemarine.ai/brief/2026-10-29/ https://codemarine.ai/brief/2026-10-29/ Thu, 29 Oct 2026 00:00:00 GMT If your apps or servers run on Node.js, make sure this week's update is installed and the apps restarted; attackers are now trying a working exploit against unpatched machines. If you look after Linux servers, install the latest kernel update and reboot; US officials say a kernel flaw is being combined with the PHP2Shell attack to take full control of machines. If your company uses Oracle E-Business Suite for finance, payroll or HR, ask IT to confirm last week's Oracle security patch is installed. If you use a Mac for coding, the git and curl tools that come with macOS still accept the leaked eMudhra certificates, and the latest macOS update undid the manual fix, so redo it. If your company uses Tailscale, update every device to version 1.104.4 or later. https://codemarine.ai/brief/2026-10-28/ https://codemarine.ai/brief/2026-10-28/ Wed, 28 Oct 2026 00:00:00 GMT If your apps or servers use Node.js or .NET, make sure this week's updates are installed and the apps restarted; US officials now say a flaw in a common compression library is being used in real attacks. If your website runs on PHP, including WordPress, Drupal or Joomla, check it was updated this week; attackers are actively trying the PHP2Shell flaws. If you run an online shop on Magento, apply Adobe's July security update and check for admin accounts or page content you don't recognise. If your company uses Tailscale's built-in SSH feature, ask your IT team to turn off SSH forwarding until Tailscale ships a fixed version. Windows PCs that don't get automatic updates should install Microsoft's new certificate update so they stop trusting the leaked eMudhra certificates. https://codemarine.ai/brief/2026-10-27/ https://codemarine.ai/brief/2026-10-27/ Tue, 27 Oct 2026 00:00:00 GMT If your website runs on PHP, including WordPress, Drupal or Joomla, make sure it was updated this week; attackers have now broken into at least one unpatched server. Apps built with Node.js or .NET, and Python apps that unpack compressed web traffic, need this week's updates and a restart; a flaw in a common compression library can let attackers run code. If your team uses GitHub, look for unexpected branches starting with ci-sync- and change any secrets those repositories hold. If you run an online shop on Magento, check for admin accounts and page blocks you don't recognise. Mac command-line tools still trust some leaked security certificates; ask your IT team to apply the fix on the eMudhra tracker page. https://codemarine.ai/brief/2026-10-24/ https://codemarine.ai/brief/2026-10-24/ Sat, 24 Oct 2026 00:00:00 GMT If your website runs on PHP, including WordPress, Drupal or Joomla, make sure it was updated this week; attackers are scanning for sites that weren't. If your company runs its own GitLab server, update it to the latest release now. Apps written in Python that handle uploaded pictures should be using Pillow 13.0.0, the image library that just fixed several serious bugs. If you use a Mac's built-in command-line tools, they may still trust some leaked security certificates; ask your IT team to apply the fix on the eMudhra tracker page. Change any default or weak passwords on your firewall or VPN, and keep those devices updated; a criminal group stole more than 70,000 logins from them. https://codemarine.ai/brief/2026-10-23/ https://codemarine.ai/brief/2026-10-23/ Fri, 23 Oct 2026 00:00:00 GMT If your website or app is built with Next.js, ask your developers to update it today and redeploy. If your website runs on PHP, including WordPress, and it hasn't been updated this week, update it now or take it offline until you can. Developers should update Node.js and Bun on laptops, build servers and container images, not just in production. If you host anything on Railway, change every password and API key you stored there. Keep installing the updates your computer and phone offer; some security certificates could still be faked this week. https://codemarine.ai/brief/2026-10-22/ https://codemarine.ai/brief/2026-10-22/ Thu, 22 Oct 2026 00:00:00 GMT If your website runs on PHP, ask whoever looks after it to update PHP today. If your team builds AI apps in Python, make sure nobody installed LiteLLM 1.107.0. Any machine that ran it needs new passwords and keys. Install the updates your computer, phone and browser offer. Some security certificates could be faked this week, and updates carry the fix. Running Plex at home or GitLab at work? Both need updating now.