Railway's breach, CyberCartel's AI agents, a malicious LiteLLM release, Storm-0940, and the update-everything checklist.
News · 2026-10-22
On October 21, Railway, a popular service for hosting apps, confirmed that an attacker reached the system holding its customers' secret settings and decrypted some of them. Railway says the target was keys for AI providers such as OpenAI and Anthropic. OpenCode confirmed a similar breach on October 17, and OpenRouter was named in a breach claim it has not confirmed. A stolen key works like a credit card for AI.
What you can do: If you use AI API keys anywhere, replace them today, set a spending cap on each one, and give every app its own key so one leak stays small.
Read the sourceNews · 2026-10-22
Security firm Straiker says a group called CyberCartel ran a team of AI agents built on Claude, Grok and Kimi against more than 400 banks and payment companies in Latin America, with little human effort. Anthropic has blocked the group. Which banks were hit and how much was stolen is not public.
Read the sourceNews · 2026-10-21
LiteLLM, a popular Python tool for calling many AI models, shipped a version on PyPI and Docker with a hidden password stealer that runs whenever Python starts. It has been removed, and version 1.106.2 is clean. Anyone who installed 1.107.0 should treat the keys on that machine as stolen.
Read the sourceNews · 2026-10-22
Microsoft says a China-linked group used ARTEX, an open-source tool that lets an AI model run hacking steps, to break into ConnectWise's cloud backup service and reach customers' Microsoft 365 accounts. About 170 organizations were confirmed hit. How much the AI did on its own is not shown.
Read the sourceFrom our library · 2026-10-22
A viral post told everyone to update everything after today's incidents. The real problem behind it is eMudhra, a company whose certificates help browsers decide that a website is genuine. Browser and system updates fix most of it, but tools like pip, uv and Docker images keep their own copy of that trust list.
What you can do: Update your browser and operating system today. Never install a "certificate fix" from an email or a pop-up, and never click past a browser security warning.
Read the source
From us
Four live sessions for product managers, founders, marketers and developers who want to turn ideas into working software with Claude Code. Setup is guided, and no programming experience is needed.
See the details
From us
A two-session live workshop for professionals who want Claude to work like a real teammate, no coding needed. You build a knowledge base, an agent skill, a prompt library and your own Artifacts, and connect Claude to the apps you already use.
See the detailsOne vote per browser. An informal reader poll, not a representative survey.
Comments
Join in with your explainx community account. Comments are plain text (no links, up to 600 characters), follow the community guidelines, and are reviewed before they appear.
No comments yet. What did you think of this edition?
Loading…