<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Security Desk on Intelligent Artifact</title>
    <link>https://intelligentartifact.com/security/</link>
    <description>Recent content in Security Desk on Intelligent Artifact</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <lastBuildDate>Wed, 21 Oct 2026 22:10:36 -0400</lastBuildDate>
    <atom:link href="https://intelligentartifact.com/security/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Elias Taylor challenges the PHP exploit panic</title>
      <link>https://intelligentartifact.com/security/elias-taylor-php-exploit-panic/</link>
      <pubDate>Wed, 21 Oct 2026 22:09:27 -0400</pubDate>
      <guid>https://intelligentartifact.com/security/elias-taylor-php-exploit-panic/</guid>
      <description>Unreliable public demonstrations do not erase maintainer-confirmed flaws. Taylor’s critique and the HN discussion separate those claims.</description>
    </item>
    <item>
      <title>Railway urges credential rotation while deployments remain paused</title>
      <link>https://intelligentartifact.com/security/railway-secret-exposure-and-blocked-redeployments/</link>
      <pubDate>Wed, 21 Oct 2026 22:09:27 -0400</pubDate>
      <guid>https://intelligentartifact.com/security/railway-secret-exposure-and-blocked-redeployments/</guid>
      <description>The company reports possible exposure of customer secrets. Its recovery advice runs into a practical limit: some changes need builds to resume.</description>
    </item>
    <item>
      <title>LiteLLM’s compromised release stole credentials through Python startup</title>
      <link>https://intelligentartifact.com/security/litellm-compromised-release-credential-theft/</link>
      <pubDate>Wed, 21 Oct 2026 21:51:56 -0400</pubDate>
      <guid>https://intelligentartifact.com/security/litellm-compromised-release-credential-theft/</guid>
      <description>Malicious packages and container images reached users through the release pipeline. Rebuilding environments and rotating exposed credentials are separate jobs.</description>
    </item>
    <item>
      <title>PHP2Shell brings emergency patches and reports of active attacks</title>
      <link>https://intelligentartifact.com/security/php2shell-emergency-patches-and-exploitation-evidence/</link>
      <pubDate>Wed, 21 Oct 2026 21:51:56 -0400</pubDate>
      <guid>https://intelligentartifact.com/security/php2shell-emergency-patches-and-exploitation-evidence/</guid>
      <description>Patch the PHP runtime, check the actual server configuration, and distinguish observed attempts from confirmed compromises.</description>
    </item>
    <item>
      <title>Start here: security for people who build and run software</title>
      <link>https://intelligentartifact.com/security/start-here/</link>
      <pubDate>Wed, 21 Oct 2026 21:43:50 -0400</pubDate>
      <guid>https://intelligentartifact.com/security/start-here/</guid>
      <description>Agent permissions, software supply chains, incidents explained, and practical defense. Follow the evidence from a reported weakness to an effective fix.</description>
    </item>
  </channel>
</rss>
