https://nalvica.com/en/blog/Important vulnerabilities and data breaches, new AI models and changes in the technology businesses rely on. What happened, who it affects and what to do about it.en https://nalvica.com/en/blog/claude-haiku-5-5-ceny-dostepnosc-dla-firm/https://nalvica.com/en/blog/claude-haiku-5-5-ceny-dostepnosc-dla-firm/Thu, 22 Oct 2026 08:00:00 +0200Claude Haiku 5.5 costs from USD 0.10 per million tokens. What it is good for, what a deployment costs and how to handle GDPR when using it. https://nalvica.com/en/blog/wyciek-fakturownia-dane-kont-kontrahentow-faktur/https://nalvica.com/en/blog/wyciek-fakturownia-dane-kont-kontrahentow-faktur/Thu, 22 Oct 2026 08:00:00 +0200The Fakturownia.pl breach affected every account. What leaked, when to notify UODO and how to protect your company from invoice fraud. https://nalvica.com/en/blog/microsoft-patch-tuesday-pazdziernik-2026-cve-2026-96951/https://nalvica.com/en/blog/microsoft-patch-tuesday-pazdziernik-2026-cve-2026-96951/Thu, 22 Oct 2026 08:00:00 +0200Microsoft fixed over 1,400 flaws, including the exploited CVE-2026-96951 in Windows Shell. What to deploy first, KB numbers and the Exchange update issue.CVE-2026-96951CVE-2026-108398CVE-2026-92707CVE-2026-70291CVE-2026-88156CVE-2026-70571CVE-2026-70229CVE-2026-96934CVE-2026-100202CVE-2026-102214CVE-2026-70187CVE-2026-102866 https://nalvica.com/en/blog/openai-api-wycofanie-gpt-4o-gpt-4-1-migracja-gpt-6-luna/https://nalvica.com/en/blog/openai-api-wycofanie-gpt-4o-gpt-4-1-migracja-gpt-6-luna/Thu, 22 Oct 2026 08:00:00 +0200GPT-4o and GPT-4.1 leave the OpenAI API on January 14, 2027; older models go on October 23. What to check, what GPT-6 Luna costs and how to migrate. https://nalvica.com/en/blog/railway-wyciek-zmiennych-srodowiskowych-rotacja-sekretow/https://nalvica.com/en/blog/railway-wyciek-zmiennych-srodowiskowych-rotacja-sekretow/Thu, 22 Oct 2026 08:00:00 +0200Railway confirms an intruder may have accessed customer environment variables. Which keys, passwords and tokens to rotate and how to check for misuse. https://nalvica.com/en/blog/php2shell-cve-2026-109618-109619-rce/https://nalvica.com/en/blog/php2shell-cve-2026-109618-109619-rce/Thu, 22 Oct 2026 08:00:00 +0200CVE-2026-109618 and CVE-2026-109619 let attackers take over PHP servers without login. Who is exposed, which versions to install, what to check in logs.CVE-2026-109618CVE-2026-109619 https://nalvica.com/en/blog/gemini-4-argon-dostepnosc-ceny-dla-firm/https://nalvica.com/en/blog/gemini-4-argon-dostepnosc-ceny-dla-firm/Thu, 22 Oct 2026 08:00:00 +0200Gemini 4 Argon is available in the API and Gemini Enterprise, including the EU region. Pricing after 30 November, default-on from 27 October, GDPR. https://nalvica.com/en/blog/litellm-1-107-0-zlosliwe-wydanie-pypi-docker/https://nalvica.com/en/blog/litellm-1-107-0-zlosliwe-wydanie-pypi-docker/Thu, 22 Oct 2026 08:00:00 +0200LiteLLM 1.107.0 on PyPI and Docker carried credential-stealing malware. Who is affected, how to check and which keys to rotate. https://nalvica.com/en/blog/linux-ksmbd-luki-rce-serwer-smb-w-jadrze/https://nalvica.com/en/blog/linux-ksmbd-luki-rce-serwer-smb-w-jadrze/Thu, 22 Oct 2026 08:00:00 +0200Two ksmbd RCE flaws were disclosed before a fix; CVE-2026-72422 and CVE-2026-89788 are already patched. Check if you run the in-kernel SMB server.CVE-2026-72422CVE-2026-89788 https://nalvica.com/en/blog/nodejs-27-jedno-wydanie-rocznie-harmonogram-lts/https://nalvica.com/en/blog/nodejs-27-jedno-wydanie-rocznie-harmonogram-lts/Thu, 22 Oct 2026 08:00:00 +0200Node.js moves to one major version a year. End-of-support dates for lines 22, 24 and 26, the status of 18 and 20, and an upgrade plan for companies. https://nalvica.com/en/blog/meta-25-mld-usd-nowy-meksyk-prywatnosc-pixel/https://nalvica.com/en/blog/meta-25-mld-usd-nowy-meksyk-prywatnosc-pixel/Thu, 22 Oct 2026 08:00:00 +0200A New Mexico court fined Meta $25bn for misleading privacy statements. What to check in your Meta Pixel, Conversions API and cookie banner setup. https://nalvica.com/en/blog/nodejs-cve-2026-111497-brotli-rce/https://nalvica.com/en/blog/nodejs-cve-2026-111497-brotli-rce/Thu, 22 Oct 2026 08:00:00 +0200A Brotli decoder flaw in Node.js may allow remote code execution. Check which applications are exposed and where old Node.js is still running.CVE-2026-111497CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-105481CVE-2026-106072CVE-2026-106074CVE-2026-106070CVE-2026-106071CVE-2026-106073 https://nalvica.com/en/blog/java-cve-2026-91403-certyfikaty-emudhra/https://nalvica.com/en/blog/java-cve-2026-91403-certyfikaty-emudhra/Thu, 22 Oct 2026 08:00:00 +0200CVE-2026-91403 made Java trust eMudhra certificates with weak keys. Who is exposed, where to look for JDKs, and what to do today and in the next window.CVE-2026-91403 https://nalvica.com/en/blog/gitlab-cve-2026-97229-krytyczna-luka-ci-cd/https://nalvica.com/en/blog/gitlab-cve-2026-97229-krytyczna-luka-ci-cd/Thu, 22 Oct 2026 08:00:00 +0200CVE-2026-97229 in GitLab CE/EE allows code execution via a CI/CD regex. Which instances to patch today, how to check the version and what to review after.CVE-2026-97229