10.22.26 | PHP security release strengthens security, Meta ordered to pay $25B, No easy PHP vulnerability exploit

This is a recap of the top 10 posts on Hacker News on Oct 22, 2026.

Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights

• (00:00) - Intro
• (00:18) - Today's PHP security release, and how we're strengthening security
• (01:38) - Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case
• (02:38) - There isn't an easy exploit for this PHP vulnerability
• (03:44) - Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
• (05:01) - mitmproxy adds --emudhra option
• (06:10) - Security Disclosure
• (07:14) - DuckDB 2.0.0 LTS “Cinnamon Teal”
• (08:25) - Claude Duet
• (09:29) - GitLab critical patch release
• (10:40) - PingCap TiDB Leaks
• (12:02) - Outro

Today's PHP security release, and how we're strengthening security
https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/
https://news.ycombinator.com/item?id=50182987

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case
https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html
https://news.ycombinator.com/item?id=50184820

There isn't an easy exploit for this PHP vulnerability
https://eliastaylor.com/noexploit/
https://news.ycombinator.com/item?id=50188948

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
https://news.ycombinator.com/item?id=50181114

mitmproxy adds --emudhra option
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
https://news.ycombinator.com/item?id=50189232

Security Disclosure
https://blog.railway.com/p/security-disclosure-wednesday-october-21st
https://news.ycombinator.com/item?id=50188228

DuckDB 2.0.0 LTS “Cinnamon Teal”
https://duckdb.org/2026/10/21/announcing-duckdb-200
https://news.ycombinator.com/item?id=50181136

Claude Duet
https://claude.com/product/claude-duet
https://news.ycombinator.com/item?id=50186037

GitLab critical patch release
https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
https://news.ycombinator.com/item?id=50185869

PingCap TiDB Leaks
https://fulcrumsec.vg/pingcap/
https://news.ycombinator.com/item?id=50173716