AI agents behind ConnectWise breach, PHP2Shell exploited days before patches, Japanese cloud hack

Podcast: Cybersecurity Today · David Shipley

Opublikowano: 2026-10-22

PHP Exploited Before Patch, Unpatched Linux SMB Bugs, GitLab Max-Severity Fix, and AI Agents in ConnectWise & Japan Breaches Cybersecurity Today (Oct. 23, 2026) covers active exploitation of two critical PHP RCE flaws beginning at least four days before patches shipped, with multiple firms seeing failed pre-disclosure attempts and the UK NCSC urging immediate patching or taking servers offline. It also details two publicly disclosed, unpatched Linux kernel ksmbd SMB RCE bugs (one unauthenticated on port 445), exposed after ZDI credited Trend Micro's AI scanner and copied public mailing lists without patches. GitLab issued fixes for a maximum-severity unauthenticated...