Unchained · Saturday, October 24, 2026
Tom and Tarun discussed a massive series of security disclosures over a 48-hour period—referred to as Black October—which included major remote code execution flaws in PHP, Node.js, and Linux kernels. Multiple government agencies globally, such as in Finland, the Netherlands, and Japan, took web services offline or urged urgent patching as attacks mounted.
“Security incident, an event happened yesterday that security experts are calling Black October. Basically, in the past two days, 48 hours, there have been multiple, basically 10 out of 10 CVs disclosed in most of the top languages, frameworks, open source, libraries, everything that runs the web.”