The internet is having a particularly rough cybersecurity day, with a series of critical vulnerabilities affecting multiple platforms.

Government websites worldwide went down due to security flaws identified by AI in the programming language PHP, leading the NSA to advise immediate updates or system shutdowns. Meanwhile, Node.js released a security update to patch four high-severity vulnerabilities, including a remote code execution risk and TLS validation bypass threats.

The PHP update wasn't the only shocker. LiteLLM, a popular open-source proxy, was compromised, with malicious code injected into PyPI, Docker Hub, and GHCR. This code included an information stealer targeting cloud credentials and passwords, plus a remote access trojan for command execution.

In other news, the Indian certificate authority, eMudhra, had its private keys compromised, potentially allowing attackers to issue fraudulent certificates. This incident is likened to the massive cleanup job caused by the Heartbleed vulnerability.

Other security breaches have also hit the headlines, including the cloud-native database-as-a-service, TiDB Cloud, and the exploitation of four flaws in Plex Media Server, collectively known as Plex2Shell. BeyondTrust warned of a critical zero-day in its Remote Support product, exploited since August. These issues underline the ongoing challenges faced by cybersecurity teams, especially as AI could potentially make it easier for attackers to exploit vulnerabilities once they are identified.