Starting with a vulnerability in PHP, flaws have also been exposed in the open-source JavaScript runtime Node.js and the open-source proxy LiteLLM, which splits requests across multiple LLM providers, raising worries over internet security.

A TechCrunch report citing Reuters on Oct. 21 said that after a critical security flaw was found in PHP, a programming language widely used for website development, more places in countries have moved to block websites for now.

The U.S. National Security Agency recommended that organisations using PHP update immediately or keep systems offline until they update.

Node.js also disclosed that it patched four high-risk vulnerabilities in the latest version. One of them allowed an attacker to remotely control a server, and two others allowed attackers to bypass TLS verification and evade server identity checks, TechCrunch reported.

The popular open-source tool LiteLLM was also breached. LiteLLM said on social media platform X, formerly known as Twitter, that an attacker planted malicious code in its software.

Versions of LiteLLM containing the malicious code were also uploaded to the Python Package Index, Docker Hub and GitHub Container Registry, and the malicious code included an information-stealing tool targeting cloud credentials, passwords and AI service credentials, as well as a remote access trojan, TechCrunch reported.

LiteLLM deleted the distributed versions and images containing the malicious code and recommended that users who installed them follow response guidance.

India's certification authority eMudhra had its private key stolen. This has created a situation in which attackers can issue fake certificates and impersonate legitimate websites. Security experts said a large-scale remediation effort was unavoidable and assessed the fallout as larger than the OpenSSL 'Heartbleed' vulnerability, TechCrunch reported.

Earlier, the cloud database service TiDB Cloud disclosed on Oct. 19 that it had been breached.

Last week, security firm BeyondTrust warned customers to quickly patch a vulnerability in its remote support product Remote Support that hackers have exploited since August.