HIGH/ NOVEMBER 9, 2026TODAY’S BRIEFING — #234
Claude Code leaks 1,122 repos; Paint RCE patched; PHP flaws threaten 70% of web
Anthropic's Claude Code exposed passwords and API keys in 1,122 public GitHub repositories via a 'Don't Ask Again' feature. Microsoft Paint RCE fix deployed via Store. PHP vulnerabilities affecting ~70% of websites now exploited.
CVE-2026-83844Microsoft Paint — Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code locally.CVE-2026-109618PHP Group PHP — PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. · In CISA KEVCVE-2026-109619PHP Group PHP — PHP has various global state that temporarily points into request memory. · In CISA KEV
Read the full briefing →