Sam Stepanyan

@OWASPLondon Chapter Leader (#OWASP #OWASPLondon). OWASP Board Member. Application Security (#AppSec) Consultant. OWASP #Nettacker Project leader. #CISSP

[Sam Stepanyan @securestep9]

#LiteLLM compromised AGAIN! LiteLLM v1.107.0 on #PyPI carries a remote code execution backdoor and a credential stealer which steals Cloud and AI credentials. #Malware runs at Python startup, no import needed.

#SoftwareSupplyChainSecurity
👇
https://t.co/hnI27TKRKw

[Sam Stepanyan @securestep9]

Cyber criminals steal children's data after company used 'Password1' #password to protect old account:
👇
https://t.co/z9YiXpDsqz

[Sam Stepanyan @securestep9]

#Node.js issued security updates for its 22.x, 24.x, and 26.x versions, fixing high-severity issues in DNS resolution, TLS certificates, Brotli decoding, HTTP agents, and crypto caches:
👇
https://t.co/Nl8ncNVKi3

[Sam Stepanyan @securestep9]

🚨 #PHP2Shell: Two critical #PHP flaws (CVE-2026-109618 & CVE-2026-109619) allow unauthenticated #RCE!

#WordPress, #Drupal, #Magento and countless web apps may be exposed. PHP powers 69% of websites.

Emergency patches are OUT. Update PHP now!
👇
https://t.co/It53zZ1hVm

[Sam Stepanyan @securestep9]

Global #HTTPS trust incident! #eMudhra, an Indian Certificate Authority trusted worldwide, issued 8 CA certificates with trivially weak private keys.

Impact: forged HTTPS certificates, website impersonation & risks beyond browsers.
👇
https://t.co/H1GioBPMUw

[Sam Stepanyan @securestep9]

#GoogleCloud outage hits UK banks (HSBC, Lloyds, Revolut), UK courts and many other businesses:
#GoogleCloudDown
#GCPdown
👇
https://t.co/GGdCm4qqeW

[Sam Stepanyan @securestep9]

If you are an OWASP member - don't forget to vote in the OWASP Global Board elections!
All eligible members should have received an e-ballot (check the email you used to pay for your OWASP membership):
🗳️☑️

[OWASP® Foundation @owasp]

🗳️ OWASP Board Election voting is open!

OWASP members, it’s time to make your voice heard! With three Board seats up for election, your vote helps shape the future of our community.

📩 Keep an eye on your inbox for your unique ballot (check both personal and OWASP emails!).

⏰ Voting closes October 30 at midnight UTC.

Learn more: https://t.co/CbmVtl4lAC

#community #opensource #boardelections #appsec

[Sam Stepanyan @securestep9]

#OpenCode #databreach
👇

[Matt Johansen @mattjay]

🚨 Confirmed. OpenCode hacked. Keys stolen.

Telling customers to revoke.

[Sam Stepanyan @securestep9]

#NPM - A malicious npm package 'imgdecode' hides a Windows DLL that downloads encrypted shellcode from GitHub and injects it into "dllhost.exe".

One "require()" could compromise a developer’s machine:

#SoftwareSupplyChainSecurity
👇
https://t.co/UUJKbY4KIH

[Sam Stepanyan @securestep9]

Hijack an #npm package without stealing credentials? #GitHub Tightens npm Publishing After a "SlugFest" Flaw Left 1,500+ Packages Vulnerable to Hijacking:

#SoftwareSupplyChainSecurity
👇
https://t.co/kryEFuvax3

[Sam Stepanyan @securestep9]

#Anthropic launches FREE AI-powered vulnerability scanning service for established #opensource projects that have a critical impact on infrastructure and user security.

🔍 Periodic scans using Claude Mythos
🤖 Fully AI-generated reports
#AppSec
👇
https://t.co/6R6rh3uVhC

[Sam Stepanyan @securestep9]

#GitHub repos hit by a new supply chain attack - GhostAction attackers compromised maintainer accounts and injected malware into 346 repositories, including #Uber's athenadriver stealing cloud&AI credentials, CI/CD secrets:

#SoftwareSupplyChainSecurity
👇
https://t.co/hYPLUAa026

[OWASP London @OWASPLondon]

Our meetup has started and we currently have @HannahFoxwell on stage speaking about Platform as a Product - What Happens When We Treat Security As a User?
Watch the 📺 livestream here:
👇

https://t.co/zBHDDfps4o

[Sam Stepanyan @securestep9]

Using #Atlassian products like #Confluence, #Jira or #Bitbucket on-premise?

Critical vulnerability CVE-2026-21589 (CVSS 9.3) lets unauthenticated attackers read known web-root files across 8 Atlassian products. Patch affected self-hosted instances now!
👇
https://t.co/W7EIJwxNG0

[Sam Stepanyan @securestep9]

#Microsoft Exchange Vulnerabilty CVE-2026-96940 Lets Authenticated Attackers Read Other Users' Mailboxes:

👇

https://t.co/1r4Q0ZspQI

[Sam Stepanyan @securestep9]

#Citrix: A third #NetScaler #zeroday is being exploited days after admins patched two earlier flaws. CVE-2026-88779 remotely crashes SAML-enabled appliances. Install 14.1-73.41/13.1-64.28+, preserve evidence and investigate unexpected reboots:
👇
https://t.co/QL8T50mgGb

[Sam Stepanyan @securestep9]

#MikroTik CVE-2026-84411 is a 9.8 pre-auth root #RCE #vulnerability: one crafted HTTP request can execute code or crash RouterOS! Patched versions available.

367,000+ hosts expose the MikroTik RouterOS web interface directly to the internet.

👇
https://t.co/2ddnmlzJeZ

[OWASP London @OWASPLondon]

The next #OWASPLondon Chapter meetup will take place on October 7th, 2026.
This event is kindly sponsored by @nuaware_tech , @BlackDuck_SW and @sysdig .

Talks from @HannahFoxwell , Bhavin Bhatt and Emmanuel Gonzalez Carmona.

REGISTER to attend here:
👇
https://t.co/y2AzMPsU7D

[Sam Stepanyan @securestep9]

#AI coding agents asked for review screenshots leaked internal images in public #GitHub repos, researchers say.

Researchers counted 13,000+ images at 300+ orgs, including customer billing records!
#AISecurity
👇 https://t.co/lZZse4P1ne

[Sam Stepanyan @securestep9]

Two compromised #GitHub Actions 'actions-cool' were re-enabled with malicious tags intact, silently restarting Mini Shai-Hulud worm across downstream workflows. One action has about 15,000 dependent repos!
👇
#SupplyChainSecurity
https://t.co/J0jlb6tHMI