KuCoin is a trusted crypto exchange to buy, sell, and trade Bitcoin, Ethereum, and 1000+ altcoins—powering secure access to the Web3 economy.

Crypto Exchange | Bitcoin Exchange | Bitcoin Trading | KuCoin

<p>October has been an absolute nightmare for software. If you ship or host anything, check this list:

→ OVHcloud CLI: if you downloaded v0.11.0 to v0.15.0 on 19 October, update to v0.16.0 and rotate every secret on that disk
→ Rank Math PRO: version 3.0.123 shipped with a backdoor. Treat any site that activated it as compromised
→ LiteLLM: check your PyPI and Docker pulls
→ Tensorlake and SubQuery: audit your npm installs
→ Railway, Zeabur, OpenCode: rotate API keys stored there
→ PHP and Node.js: patch
→ eMudhra: update your browsers, OS and Go so the 8 weak CA keys are distrusted

The breach list is long. The fix list is shorter.</p>

October has been an absolute nightmare for software. If you ship or host anything, check this list:
→ OVHcloud CLI: if you downloaded v0.11.0 to v0.15.0 on 19 October, update to v0.16.0 and rotate every secret on that disk
→ Rank Math PRO: version 3.0.123 shipped with a backdoor. Treat any site that activated it as compromised
→ LiteLLM: check your PyPI and Docker pulls
→ Tensorlake and SubQuery: audit your npm installs
→ Railway, Zeabur, OpenCode: rotate API keys stored there
→ PHP and Node.js:

October has been an absolute nightmare for software. If you ship or host anything, check this list: → OVHcloud CLI: if you downloaded v0.11.0 to v0.15.0 on 19 October, update to v0.16.0 and rotate every secret on that disk → Rank Math PRO: version 3.0.123 shipped with a backdoor. Treat any site that activated it as compromised → LiteLLM: check your PyPI and Docker pulls → Tensorlake and SubQuery: audit your npm installs → Railway, Zeabur, OpenCode: rotate API keys stored there → PHP and Node.js: patch → eMudhra: update your browsers, OS and Go so the 8 weak CA keys are distrusted The breach list is long. The fix list is shorter.

Comment