Related events

Cybercast

The AI you can’t see: Bringing third-party shadow AI into the risk picture

In continuous operation: How Simpson Strong-Tie safely AI red-teams AI-powered applications

Communicating AI-enabled enterprise risk to business leaders

3D render AI artificial intelligence technology CPU central processor unit chipset on the printed circuit board for electronic and technology concept select focus shallow depth of field

3D render AI artificial intelligence technology CPU central proc

Fortinet

Fortinet FortiGuard Labs

Threat predictions for 2024: Chained AI and CaaS operations give attackers more ‘easy’ buttons than ever

Identity, the supply chain and, of course, AI

SC_Awards_3

Video: SC Award winners talk identity, supply chain and AI

AI benefits/risks

Risk Advisory_AI-ML

AI/ML

Generative AI

Nexus

Risk Advisory

AI framework vulnerabilities and model supply chain risk

Tech Explainer_AI-ML

Tech Explainer

Authenticity, provenance, and enterprise trust explained

Buyers Guide_AI-ML

Buyer's Guide

How to evaluate AI-powered fraud detection and identity verification vendors

ai_kill_switch_AdobeStock_1965971015

Perspective

Why we don’t need an AI ‘kill switch’

Special guest Joshua Wright joins us for a timely incident-response discussion!

Special guest Joshua Wright joins us for a timely incident-response discussion!

Then, in the security news this week:

<ul class="wp-block-list">
<li>Have you heard about PHP2Shell?</li>


<li>Certificates with keys small enough to guess</li>


<li>Tor exit nodes turn into SSH credential traps</li>


<li>Do USB-C cables need firmware updates now?</li>


<li>HaleHound packs a radio lab into a cheap display</li>


<li>Claude solves part of the NIST curve mystery</li>


<li>The Army and self-directed offensive cyber agents</li>


<li>Retired nuclear reactors return to power AI</li>


<li>PatchSlop</li>


<li>NGINX, NODE.js patches critical flaws</li>


<li>BeyondTrust exploited before the patch landed</li>


<li>Plex vulnerabilities move from PoC to exploitation</li>


<li>ICS patches, including a Siemens flaw exploited in the wild</li>


<li>Can fake data trigger Japan’s emergency alert?</li>


<li>Agentic pentests?</li>


<li>AI may add noise more than skill</li>


<li>AI agents navigate OT and move equipment</li>


<li>AI model helps build a Chrome exploit</li>


<li>Utah’s VPN law runs into technical reality</li>
</ul>

<ul><li>Have you heard about PHP2Shell?</li><li>Certificates with keys small enough to guess</li><li>Tor exit nodes turn into SSH credential traps</li><li>Do USB-C cables need firmware updates now?</li><li>HaleHound packs a radio lab into a cheap display</li><li>Claude solves part of the NIST curve mystery</li><li>The Army and self-directed offensive cyber agents</li><li>Retired nuclear reactors return to power AI</li><li>PatchSlop</li><li>NGINX, NODE.js patches critical flaws</li><li>BeyondTrust exploited before the patch landed</li><li>Plex vulnerabilities move from PoC to exploitation</li><li>ICS patches, including a Siemens flaw exploited in the wild</li><li>Can fake data trigger Japan’s emergency alert?</li><li>Agentic pentests?</li><li>AI may add noise more than skill</li><li>AI agents navigate OT and move equipment</li><li>AI model helps build a Chrome exploit</li><li>Utah’s VPN law runs into technical reality</li></ul>

<a rel="noreferrer noopener" target="_blank" href="https://dynamicincidentresponse.com/">https://dynamicincidentresponse.com/</a> - A New Era for Incident Response!

<a rel="noreferrer noopener" target="_blank" href="https://dynamicincidentresponse.com/">https://dynamicincidentresponse.com/</a> - A New Era for Incident Response!

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15252″} podcast from PPWorks

Vulnerability Management

PHP2Hell – Joshua Wright – PSW #949

Laptop computer displaying logo of PHP

Patch/Configuration Management

Network Security

News

PHP2Shell attacks surge worldwide as governments rush to patch

AI agent data tools and workflow automation concept with businessman typing on laptop and interacting with digital process interface for artificial intelligence development, integration, productivity