The October 2026 attack cluster
Five campaigns from 23 Sep to 23 Oct 2026 shared one mechanism: trust that was already granted. The mechanics, the signals, and the named gaps.
2026-10-23
Incidents, read for the mechanism
Each write-up traces to the published record and ends at the same question: which signal would have fired, and which part of the attack nothing here detects. The gaps are named because a coverage map without them is marketing.
LiteLLM 1.107.0: the release pipeline shipped the payload
LiteLLM 1.107.0 shipped from a lookalike repository through three stolen GitHub OAuth tokens. What the poisoned release did, and the joins that expose it.
GhostAction: the build robots became the exfiltration channel
GhostAction pushed a workflow named security-audit.yml into 340+ repositories and took 3,325 secrets. The mechanism, the signals, and what a cloud scanner cannot see.
2026-10-19
eMudhra: when the certificate authority is the supply chain
Eight eMudhra intermediate CA keys were weak enough to recover — one was the integer 4. What that means for your certificates, and what Hanu checks.
2026-10-20
EvilTokens: phishing that never asks for the password
EvilTokens used device-code phishing to take 12,000 inboxes without passwords, then had an AI read them for fraud. What Hanu catches, and what it does not.
2026-10-22