F5 releases emergency NGINX security fixes
F5 shipped emergency fixes for NGINX, reportedly including three critical issues with code-execution potential. Exposure depends on version and configuration, so check your NGINX builds and patch.
Saturday, 24 October 2026
DevOps & Cloud News: 24 Oct 2026
Emergency NGINX security fixes from F5, a software supply-chain compromise of Rank Math PRO, AI agents automating intrusions at roughly $50 each, and new AWS releases including Lambda Web Functions and AWS Continuum for code vulnerabilities.
Cybersecurity
Rank Math PRO packages carried malicious code
Rank Math PRO 3.0.123 packages distributed on 15 and 16 October reportedly contained malicious code. WordPress operators should verify installed versions and follow the vendor's remediation steps.
ConnectWise Cloud Backup credentials abused to reach Microsoft 365
Attackers reportedly used compromised ConnectWise Cloud Backup credentials to access 173 Microsoft 365 tenants. A reminder to audit privileged third-party integrations.
AI & Security
Autonomous AI agents used to attack over 1,200 websites
A reported campaign used AI agents against more than 1,200 sites at an estimated cost near $50 per successful intrusion. The figures still need independent confirmation.
AWS Continuum for code vulnerabilities is now generally available
A new AI-driven service that finds, validates and prioritizes code vulnerabilities, then opens ready-to-review fixes as pull requests.
AWS
Announcing AWS Lambda Web Functions
A serverless compute primitive that runs your HTTP framework natively, with multi-concurrent execution and automated global distribution.
Amazon S3 Tables now support all Apache Iceberg V3 data types
Adds column default values, deletion vectors and row lineage, with built-in compaction and maintenance. Existing V2 tables can be upgraded.
Introducing Amazon ECS Gateway
A fully managed ingress solution for ECS services.