Last week marked a watershed in the information security space. Major incidents occurred within a few days of each other, leading cybersecurity practitioners to dub the month “Black October”.

On October 17, a researcher reported weak private keys used for eMudhra certificates, which could allow hackers to impersonate legitimate websites.

On October 21, the PHP Foundation announced two critical-level vulnerabilities dubbed PHP2Shell . These exploited memory safety, and could allow a remote user to control any PHP server.

The same day, a version of LiteLLM, an open-source repository of LLM providers, was hacked and quarantined, all within a few hours.…