Software vulnerabilities
Latest stories covering Software vulnerabilities, with summaries and links to related coverage.
1 stories · 1 reports · page 1 of 1
1 story · 1 report in the last 7 days
Latest report · Counts as of (UTC)
Models in this coverage
Up to six tracked models linked to this topic’s reports in the last 30 days. Counts measure coverage on Themata, not usage.
- Gemini 4 Argon
Google
· Closed
Google’s reasoning model for software engineering, mathematical and scientific problems, and multi-step agents. Designed to maintain context across longer tasks.
1 story · 1 report on this topic
No established topics share multiple stories with this topic yet.
Latest stories
Is this the new cyber normal?
opinion
21 min read
A cluster of critical security disclosures in October 2026 highlighted how quickly vulnerabilities can move from discovery to attempted exploitation, particularly when AI models help researchers and attackers analyze code and develop proofs of concept. PHP2Shell, comprising CVE-2026-109618 and CVE-2026-109619, involved remote-code-execution flaws in PHP reportedly found by Calif and Wiz using GPT-5.6 Sol and Gemini 4 Argon. A leak accelerated public awareness before patches were available, and AWS reported observing attempts to exploit the flaws from October 17. Wiz estimated that affected PHP deployments could cover more than 70% of the internet. Other incidents included Mozilla’s October 20 blocking of eight eMudhra intermediate certificates after weak private keys were reported; eMudhra later said it would exit the global SSL/TLS certificate business. Railway disclosed possible access to and decryption of customer environment variables, while GitLab issued critical patches for multiple CVSS 10.0 code-execution flaws in October. LiteLLM said its compromised version 1.107.0 PyPI release and Docker images contained credential-stealing malware after an attacker used GitHub CLI credentials to run CI jobs. PingCAP disclosed unauthorized access to cloud resources as FulcrumSec claimed to have exfiltrated 10.6 TB of data. The incidents do not all have confirmed AI involvement, but they underscore shrinking response windows and the importance of patching, secret management, and coordinated vulnerability disclosure.