someone called it "Black October":
1. PHP2Shell remote code execution in PHP core
2. LiteLLM supply chain compromise
3. ConnectWise Cloud Backup OAuth takeover
4. BeyondTrust Remote Support auth bypass
5. Citrix NetScaler zero-days
6. Palo Alto PAN-OS auth bypass exploited by ransomware
7. Oracle healthcare breach
8. Japan IDC Frontier hosting compromise
(not exhaustive ofc)
commit 28e26be