Attackers target critical PHP flaws, and former CISA director Chris Krebs weighs in on AI’s role in the vulnerability surge. Railway confirms a cyberattack. HPE patches critical ArubaOS flaws. Quest Diagnostics investigates a disruptive intrusion. Capcom reports a data breach. China-linked hackers put AI-powered attacks on autopilot. And researchers uncover a Microsoft 365 campaign that hijacks authentication tokens to bypass MFA. Our guest is Anudeep Parhar, COO at Entrust, sharing his thoughts on AI kill switches. eMudra throws in the certificate towel.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today, we are joined by Anudeep Parhar, COO at Entrust, sharing his thoughts on “If you need the AI kill switch, it’s already too late.”
Selected Reading
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge (SecurityWeek)
426 Android and iOS Apps Linked to PHP2Shell Backend Risks (Hackread)
Chris Krebs on AI discovering cyber vulnerabilities: It’ll get worse before it gets better (CNBC)
Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack (TechCrunch)
HPE patches eight max severity RCE and auth bypass AOS flaws (Bleeping Computer)
Quest Diagnostics warns of potential data theft after attack on lab service system (The Record)
Gaming Giant Capcom Confirms Data Breach Exposed Users’ Personal Information (Infosecurity Magazine)
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks (SecurityWeek)
M365 Token Spray and Replay Campaign Compromises Business Email Accounts (Huntress)
eMudhra to Exit global SSL/TLS Certificate Business (eMudhra)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
