Cyber Briefing

Microsoft just pulled 7 compromised eMudhra certificates from Windows trust. Here’s what that means for your fleet. 👇 
 Today in 30 Seconds:
🔴 Patch Now: Microsoft removed 7 compromised eMudhra certificates from Windows trust. Install the October 26 update on offline machines and audit certificates that chain to eMudhra G3 roots.

🇯🇵 Incident: GMO’s FX trading cloud breach puts up to 26,739 servers at risk. Customers were told to unplug their PCs before a ransomware deadline.

🤖 Threat: A new OWASP guide finds AI agents lower the skill needed for reconnaissance and vulnerability research.

🇧🇷 Policy: Itaú is the first Brazilian bank to formalize crypto services ahead of the October 30 deadline.

When a CA’s keys fail, how fast can your team find every certificate that chains to it?
Full stories: https://cybermaterial.com/Subscribe to Cyber Briefing for a 5-minute read every weekday.
Powered by 911 Cyber, cybersecurity first responders: https://911cyber.com #CyberBriefing #Cybersecurity #InformationSecurity

Today in 30 seconds
🔴 Patch Veeam now: CVE-2026-108142 (CVSS 9.1) needs no login. Update Backup & Replication to 13.1.2 or 13.0.3.

🔥 PHP2Shell is being chained to root firewalls: 24 devices rooted, including two at a US government-affiliated organization. Patch PHP and the Linux kernel.

🇯🇵 So-net/plala breach: 2,585,481 member records leaked, plus passwords for 54,401 email addresses.

⚖️ 70 months: Nefilim and Hive ransomware affiliate Artem Stryzhak sentenced.

Your backup server is the last thing you want an attacker walking into, and today one of the most widely used backup platforms shipped a fix for a flaw that needs no login at all. 
Full stories: https://cybermaterial.com/ 
Subscribe to Cyber Briefing for these updates every weekday. 
Powered by 911 Cyber, cybersecurity first responders: https://911cyber.com 
#CyberBriefing #Cybersecurity #InformationSecurity

Apple just patched 286 security bugs, and the zero-day it fixed for targeted attacks now reaches older iPhones too.

🩹 Patch Now
• iOS/macOS 27.2 fixes 286 vulnerabilities (263 in macOS, 163 in iOS)
• iOS 18.7.11 brings the fix for exploited CVE-2026-86950 to iPhone XS, XS Max, XR and iPad (7th gen), and it's in CISA KEV

⚡ Threat Landscape
• Kaspersky chained a privileged pod, a leaked Konnectivity token and a known kernel bug into a full tenant escape in a managed Kubernetes cloud, now fixed

🚨 Incidents
• DreamHost forced email and SFTP password resets after an incident starting Oct 23, and File Manager was back Oct 26

🔓 Executive Risk & Cybernomics
• ThreatAware launches Dimension, a governed workspace for security teams' own apps

🛡️ Policy
• CISA 2030 is out: Defend, Harden, Prevail, with an implementation plan due within 180 days

💻 Career Enablement
• Zoom adds AI agent controls, with management in December 2026 and custom guardrails in Q1 2027

How fast do older devices in your fleet actually get security updates, in days or weeks?

Full stories: https://cybermaterial.com/
Subscribe to Cyber Briefing for the essentials every weekday morning.
Powered by 911 Cyber, cybersecurity first responders: https://911cyber.com
#CyberBriefing #Cybersecurity #InformationSecurity

Patched isn't patched until you restart.
216 unpatched PHP hosts sit on a suspected DPRK target list. Upgrade PHP, restart all workers.
🔓 497 token-replay sign-ins, 79 orgs
🚔 7 caught over 8.2M stolen records
🐉 Kali 2026.3 adds 6 tools
https://cybermaterial.com/ #CyberBriefing

If you like what you hear, please subscribe, leave us a review and tell a friend!
👉 What's happening in cybersecurity today? 
 
👉 Important Links:
CyberEvents: https://www.cybermaterial.com/s/cyber-events 

Cyber Jobs: https://cybermaterial.com/s/cyber-jobs 

Cyber Book Club: https://cybermaterial.com/s/cyber-book-club

Cyber Tools: https://www.cybermaterial.com/s/tools 

Visit 911Cyber: https://911cyber.app/ 

Visit Cybermaterial: https://cybermaterial.com/

If you like what you hear, please subscribe, leave us a review and tell a friend!
👉 What's happening in cybersecurity today? 
 
👉 Important Links:
CyberEvents: https://www.cybermaterial.com/s/cyber-events 

Cyber Jobs: https://cybermaterial.com/s/cyber-jobs 

Cyber Book Club: https://cybermaterial.com/s/cyber-book-club

Cyber Tools: https://www.cybermaterial.com/s/tools 

Visit 911Cyber: https://911cyber.app/ 

Visit Cybermaterial: https://cybermaterial.com/