AW Dev Rethought Radar | October Pulse (Oct 25–31, 2026)

Black October ended the way it ran — with a supply chain attack, a rushed patch cycle, and two companies cutting staff in very different ways. But the signal this week came from somewhere new: the tools we write code with became the thing being attacked.

🔭 The Rethought Radar

• Your Editor Became the Attack Surface SafeDep documented it in June and JFrog extended it this week: attackers are arming public GitHub repositories with configuration files that your editor and AI coding assistant execute automatically. A SessionStart hook in .claude/settings.json or .gemini/settings.json. An always-applied Cursor rule instructing the agent to run a setup script. A .vscode/tasks.json task that fires on folder open. Five independent triggers, one obfuscated payload that decrypts a credential stealer and runs it under Bun — downloading Bun first if you don’t have it. More than 120 repositories across dozens of accounts, including Azure’s durabletask. Cloning the repository is safe. Opening it is what executes. That inverts the rule the industry has taught for a decade — read the code before you run it — because there is no longer a moment between arrival and execution.

  ---

• Tailworm Patched in Four Bulletins, With No CVEs Tailscale shipped 1.104.4 days after an uncoordinated disclosure of 11 flaws, publishing TS-2026-014 through TS-2026-017. The fixes cover SSH socket forwarding that ran path checks as root, a memory-exhaustion crash, a tailscale serve route to the local API, and a TLS serve bug where one request could receive another mount’s permission headers. No CVE identifiers were assigned and no severity scores published. Of five serve findings, three were fixed and two declared working as designed. Headscale 0.29.5 remains unfixed, so self-hosters should treat any SSH grant as root on the target host. Worth noting for anyone who cleaned up: a stolen device key stays valid after reimaging, and only deletion at the control plane revokes it.

  ---

• PHP2Shell Is Being Exploited, and Patching Is Not Enough watchTowr’s honeypots recorded exploitation of CVE-2026-109618 and CVE-2026-109619 on 21 October — the same day the fixes shipped. Cloudflare’s CTO reported attacks beginning 07:43 UTC. Both are CVSS 9.2, unauthenticated, and Apache mod_php carries the highest risk because the attack lands before any application code runs. Two things most coverage skipped. Updating the packages does not finish the job, because running PHP workers keep the old code in memory — a fleet can be fully patched on paper and still exploitable. And the end-of-life picture is messy: 7.4, 8.0 and 8.1 have backports committed to php-src with no tagged release, while distros patch without bumping version strings, so your scanner is lying to you in both directions.

  ---

• Two Very Different Ways to Cut Staff Microsoft offered a Voluntary Exit Offer to roughly 60,000 employees — a quarter of the company — across the US, Canada, the UK and India, at level 70 and below including general managers and some vice presidents. Standard severance, decisions due the first week of December. Xbox, Windows, Copilot and Finance opted in. Sales and data centre staff did not. Innodata, the same week, cut around 550 people in India by deactivating laptops and IDs mid-workday and sending termination emails to personal addresses, with the last working day set as the day itself. Its stock fell 16%. The contrast is the story. One company spent months designing an instrument that avoids drawing up a list; the other locked people out before telling them. Both reduced headcount. Only one will still be able to hire.

  ---

• Apple Shipped a Touchscreen Mac Fifteen years after arguing that touching a vertical screen was ergonomically wrong, Apple announced the MacBook Pro with PROLED XDR Display in 14.2-inch and 16.3-inch sizes — tandem OLED with multi-touch, a Dynamic Island replacing the notch, up to 16TB on M5 Max, at roughly $400 above the equivalent non-touch models. Alongside it: iPad mini 8 at $699, M6 iMac at $1,499, and a 14-inch M6 MacBook Pro at $1,999. One detail worth sitting with: the touchscreen flagship runs M5 Pro and M5 Max, while the cheaper 14-inch MacBook Pro announced the same week got the M6. Apple put the newer silicon in the less expensive machine. The more interesting question is what touch does to a desktop OS built entirely around a precise pointer — and what it means when touch events start arriving in desktop Safari.

🔭 Trend to Watch — The Tooling Became Infrastructure

• AI developer tooling crossed a line this week, and attackers noticed before most teams did. Miasma did not exploit a vulnerability in Claude Code or Cursor. It used their documented configuration features exactly as designed — session hooks and project rules are supposed to run things.
• The same week, of nearly 200 tracked open-source AI contribution policies, more than half now ban AI-generated PR descriptions and comments. And TorchTPU landed from Google and Meta’s PyTorch team, bringing native PyTorch to TPUs across 5,000 validated Hugging Face models.
• Maturing and being attacked at the same time is what infrastructure looks like. The uncomfortable part is that session hooks and folder-open tasks are arbitrary code execution granted to whoever last pushed to a repository — and almost no team has made that trade-off explicitly, because until recently nobody was exploiting it.

✍ Closing Note

That’s your Radar, rethought ✨

October 2026 earned its name. It closed with the clearest signal of the month: the attack surface now includes the tools you use to defend everything else. Check what your editor runs when you open a folder.

Back next week with more signals 🔭