Digital Life
-
LiteLLM 1.107.0 malware can run at Python startup

October 23 analyses of the compromised LiteLLM 1.107.0 release explain how Python startup can activate credential theft and why removing the package is not enough.
-
Windows 11 preview brings phone controls and speed tests to Quick Settings

Microsoft is gradually adding connected-phone actions and internet speed testing within Quick Settings in a Windows 11 Experimental preview.
-
Arc browser shuts down December 22—move your data first

Arc for macOS and Windows will stop working on December 22, 2026, so users need to import their data into Dia or export their tabs before then.
-
Lumo’s new canvas keeps your draft beside the chat

Proton has added Creations to Lumo, giving all users a canvas for documents, code and interactive web pages alongside their conversations.
-
iPhone Duo apps put the fold to work

From Prime Video’s split-screen viewing to Detail’s video-and-transcript workspace, Apple previews app layouts for its first foldable iPhone. Optimized releases are scheduled to begin October 23, with more updates to follow.
-
Waze gets The Cat in the Hat’s rhyming voice—in English

Waze’s The Cat in the Hat collaboration offers English voice guidance by Bill Hader and themed avatar and map-vehicle options worldwide.
-
Railway urges all users to rotate keys after possible secrets exposure

Railway recommends precautionary credential rotation for all users after reporting that an unauthorized party may have obtained some decrypted environment-variable contents.
-
GitLab urges self-managed updates for critical code-execution risk

GitLab’s October 21 security release fixes a critical vulnerability that could allow unauthenticated users to execute arbitrary code on a server under certain conditions.
-
Chrome’s Enhanced Protection adds fake-repair scam warnings

Google has outlined new scam defenses for Chrome users who enable Safe Browsing’s Enhanced Protection, including ClickFix command checks, suspicious-site warnings and broader server-side Gemini detection.
-
WordPress updates alone won’t fix PHP’s critical php2shell flaws

PHP has patched two critical remote code execution flaws. Website operators need the server’s PHP runtime fixed, even with Cloudflare WAF protection.
