Don't Get Hacked: Critical Brotli Flaw & LiteLLM Compromise

Node-to-Shell, a CVSS 9.2 Brotli decoder flaw, lets unauthenticated attackers run code remotely, and Wiz says 91% of cloud environments have vulnerable resources. Microsoft Authenticator for Android could hand a malicious app your work account tokens, and Eye Security disabled the abandoned Time4Popcorn updater on two million devices to close a 9.8 remote code execution flaw. Plus emergency PHP patches reaching back to PHP 5.4, APT41's BlackX bootkit bypassing Secure Boot on diplomatic systems, and a compromised LiteLLM 1.107.0 release that steals cloud credentials.

The hot sheet: https://blog.thehotdrop.live/blog/the-hot-drop-for-10-26-2026

0:00 Brotli Decoder Flaw: Update Now
1:59 Authenticator Hands Out Your Tokens
3:52 Popcorn Updater Gets Sinkholed
5:28 PHP: The Flaw That Keeps on Giving
6:19 APT41's BlackX Bypasses Secure Boot
7:19 LiteLLM Compromised: Rotate Everything

#Cybersecurity #NodeJS #PHP #SupplyChain #ZeroDay