NetTraceArcade | Cybersecurity, AI & Cloud

Category: Cybersecurity News | Supply Chain Security | AI Security  |  Published: October 23, 2026  |  Reading time: about 15 minutes On March 24, 2026, a threat actor known as TeamPCP published two malicious versions of LiteLLM to PyPI. LiteLLM is the Python library and proxy that thousands of teams use to route requests to OpenAI, Anthropic, Google, Amazon and dozens of other model providers, and it was reportedly being downloaded about 3.4 million times a day. The attackers never found a bug in LiteLLM. Instead, they compromised Trivy, a popular vulnerability scanner that ran inside LiteLLM’s build pipeline, and used it to steal the credentials needed to publish packages as the real maintainer. A security tool became the way in. The incident was ranked among the biggest security stories of the year because of what it combined: a package that sits next to the most valuable keys in an AI stack, a trusted delivery channel, and an attack that could run wit...

Cyber Attacks Worldwide: The October 2026 Threat Report | NetTrace Arcade ► NetTrace Arcade · Threat Log Cyber Attacks Worldwide: What Hit the Internet in October 2026 From a 11.7-million-account gaming breach to ransomware that froze a cloud provider, here is a detailed look at the incidents shaping the threat landscape right now, and how to protect yourself. // POSTED 23 OCT 2026 · READ TIME ~10 MIN · CATEGORY: CYBERSECURITY Every month the internet plays out like a never-ending arcade game: new levels, tougher bosses, and opponents who learn from every round you lose. October 2026 has been one of the busiest stretches in recent memory. Trackers have logged dozens of notable incidents in just three weeks, ranging from breaches at household-name brands to poisoned software packages and attacks on critical infrastructure. In this post we trace the biggest events, explain what they reveal about attacker tactics, and finish with practic...

Category: Cybersecurity News | Web Security | Published: October 22, 2026 | Reading time: about 14 minutes On October 21, 2026, the PHP project shipped an emergency security release that fixes two critical remote code execution flaws in the PHP interpreter itself. The vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619 and collectively nicknamed PHP2Shell, each carry a CVSS v4.0 score of 9.2. Because the bugs live in the language runtime rather than in any single framework or plugin, they reach a very large share of the web, from small WordPress sites to enterprise applications and hosting platforms. This post explains what was disclosed, how the flaws work at a conceptual level, who is exposed, how to check your own systems, and exactly what to do about it. Action required today. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 (or your vendor’s patched package). The PHP team states that updating is the only complete fix. Configuration workarounds exist but only clo...

Windows Server is still the backbone of a huge number of company systems. It powers Active Directory, SQL Server, .NET applications, file servers, remote work desktops and a long list of legacy business software that is not going away any time soon. The good news is that you no longer need to buy hardware, rack it in a server room or install an operating system from a disc to run it. On Google Cloud, you can have a Windows Server virtual machine up and running in a few minutes, and the Compute Engine: Qwik Start - Windows (GSP093) lab on Google Cloud Skills Boost is one of the fastest ways to learn how. The lab itself is short, usually around fifteen minutes. You create a Windows virtual machine, wait for it to finish booting, generate a password, and connect to its desktop using Remote Desktop Protocol (RDP). It sounds simple, but those few steps touch several ideas that every cloud beginner needs to understand: machine types, boot disks, regions and zones, firewall rules, serial...

Almost every project on Google Cloud ends up needing somewhere to put files. Images for a website, exported reports, database backups, log archives, training data for a model. The service Google built for this is Cloud Storage, and the Cloud Storage: Qwik Start lab (GSP073) on Google Cloud Skills Boost is the usual first contact with it. The lab itself is short. You create a bucket, upload a file, make that file public, and create a folder. It takes maybe fifteen minutes if nothing goes wrong. The reason it is worth writing about is that those few clicks hide a handful of decisions (bucket names, locations, storage classes, access control) that matter a lot once you build something real. This post covers the lab step by step and also explains what each setting actually does, so you are not just copying values from the instructions. The full video walkthrough is embedded below. Watch it once, then keep this page open as a reference while you do the lab yourself. Lab Ove...