Hacktober – Cyberattack Wave Hits PHP, Node.js, Binance, LiteLLM, Pentagon, and a Few More

October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software packages, government records, and grocery chains. Binance investigated billions of dollars in unauthorized transactions, PHP issued emergency fixes, and a malicious LiteLLM release put developer credentials at risk. Other incidents involved Railway, OpenCode, Polymarket, Coinbase, Cursor, eMudhra, and Capcom. Together, these reports show how exposed credentials and trusted software channels can turn a limited intrusion into a much larger security problem. The name “Hacktober” captures the volume of news, but it should not suggest that every event belonged to one coordinated campaign. The reports cover different attack methods, discovery dates, and levels of confirmation. Some describe confirmed data theft; others involve possible exposure, malicious packages, or vulnerabilities that could enable an attack. Keeping those categories separate is essential to understanding what happened and who actually faced risk. Binance became the largest financial story in the roundup after suspending deposits and withdrawals during a security investigation. Cybersecurity News’ updated Binance breach report placed the estimated incident impact at $6.3 billion and…