Cybersecurity news, intelligence & practical insights. Helping professionals stay informed, prepared & secure. | 5 Minute Cyber Brief ⚡
United States
Joined November 2018
- Tweets3.2K
- Following1.5K
- Followers2K
- Likes3.2K
Friday's brief: a 10.0 GitLab fix for self-hosted servers, an exploited VeloCloud console, a poisoned LiteLLM release and PHP2Shell logs to read back to Oct 17. Here's the order we'd take them.
cyberexperts.com/2026-10-23/…
Amazon's honeypots caught a PHP2Shell exploit attempt on Oct 17, four days before PHP shipped the fix. Patched isn't the same as clean: check web logs and web roots back to Oct 17.
cyberexperts.com/2026-10-23-…
CyberExperts.com retweeted
PHP shares mitigation for new RCE vulnerability with no patch
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
LiteLLM 1.107.0 was malware for about two hours on Oct 21: it stole cloud, AI and CI keys on any machine that installed it. Check pip show litellm, rebuild on 1.106.2 and rotate everything that host could reach.
cyberexperts.com/2026-10-23-…
Network+ myth or fact: is an employee ID badge a logical access control? Decide, then check the verdict in the video. More Network+ practice questions, always free, no card.
lab.cyberexperts.com/tracks/…
Self-hosted GitLab has a 10.0 flaw that lets someone with no account run code on the server. Every version since 7.0. GitLab.com is patched; yours isn't until it runs 19.5.1, 19.4.3 or 19.3.6.
cyberexperts.com/2026-10-23-…
Attackers are exploiting a new VeloCloud Orchestrator flaw (CVE-2026-114625, 9.9) that turns the lowest read-only login into a superuser. Upgrade on-prem VCO to 5.2.3.18, 6.1.3.10 or 6.4.2.12 and block the two IPs Arista published.
cyberexperts.com/2026-10-23-…
Thursday's brief: Fortinet's firewall fixes land today, a 9.8 root bug in Cisco Expressway, a trust-store update for the eMudhra certificate mess, and PHP2Shell. Here's the order we'd take them.
cyberexperts.com/2026-10-22/…
PHP2Shell patches are out (8.5.12, 8.4.27, 8.3.36, 8.2.35) and attack attempts are already hitting sensors. Restart every PHP worker and check the version that is actually serving requests.
cyberexperts.com/2026-10-22-…
CyberExperts.com retweeted
The PHP patches are out, which means attackers now know what to look for. @mosesrenegade, Senior Instructor at SANS Institute shared what to do first on yesterday’s emergency livestream. Versions 8.2 and up get the fix. Earlier versions don’t. go.sans.org/MpvmG6
#PHP #infosec
Browsers already block eMudhra's eight broken intermediate certificates. Your containers, Go binaries and Python tools may not. Update ca-certificates, Go 1.27.3/1.26.10 and certifi, then rebuild.
cyberexperts.com/2026-10-22-…
CISA question of the day: what's the MAIN concern with single sign-on? Pick A, B, C or D, then check the answer in the video. More CISA practice questions, always free, no card.
lab.cyberexperts.com/tracks/…
Fortinet ships critical fixes for FortiOS, FortiManager and FortiAnalyzer today and won't publish the advisories until Nov 10. FortiOS 7.6.8, 7.4.13 and 7.2.14. Internet-facing firewalls first.
cyberexperts.com/2026-10-22-…
Clustered Cisco Expressway servers can be taken over as root without a login: CVE-2026-76466, rated 9.8, no workaround. Upgrade to X15.5.20, then move Unified CM to 15SU5.
cyberexperts.com/2026-10-22-…
Wednesday's brief: PHP's 10 AM security release, Oracle's 1,295 October patches, Chrome 156's six critical fixes and a Pillow upgrade for Python upload servers. Here's the order we'd take them.
cyberexperts.com/2026-10-21/…
One crafted image can run code on a Python server that makes thumbnails with Pillow 12.3.0 or older. Pillow 13.0.0 fixes both critical bugs, and renaming the upload to .jpg doesn't help.
cyberexperts.com/2026-10-21-…
CyberExperts.com retweeted
🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 go.dhs.gov/5Hi
Chrome 156 fixes 353 security bugs, six rated critical. None are known to be exploited, but the fix only applies after the browser restarts. Check how many laptops are still on an older version.
cyberexperts.com/2026-10-21-…
Alert: a workstation is sending odd outbound traffic. What's your first goal? Pick A, B, C or D, then see if you can go 10 for 10 on the free readiness check. No card.
lab.cyberexperts.com/diagnos…
PHP's security team set its release for two critical flaws (CVSS 9.2) for 10 AM ET today. Researchers say both allow remote code execution. List every server, container and hosting account running PHP, then book the update.
cyberexperts.com/2026-10-21-…
