AI agents behind ConnectWise breach, PHP2Shell exploited days before patches, Japanese cloud hack
Cybersecurity Today

AI agents behind ConnectWise breach, PHP2Shell exploited days before patches, Japanese cloud hack

B2Upper-intermediateOctober 22, 202613 min
  • News bulletin
  • Technology

PHP Exploited Before Patch, Unpatched Linux SMB Bugs, GitLab Max-Severity Fix, and AI Agents in ConnectWise & Japan Breaches Cybersecurity Today (Oct. 23, 2026) covers active exploitation of two critical PHP RCE flaws beginning at least four days before patches shipped, with multiple firms seeing failed pre-disclosure attempts and the UK NCSC urging immediate patching or taking servers offline. It also details two publicly disclosed, unpatched Linux kernel ksmbd SMB RCE bugs (one unauthenticated on port 445), exposed after ZDI credited Trend Micro's AI scanner and copied public mailing lists without patches. GitLab issued fixes for a maximum-severity unauthenticated...

Play episode

Opens the player: the full transcript, every word clickable, with translation and flashcards.

Try it: tap any word

Real sentences from the start of this episode. Every word is marked with its level.

Sentence 4 of 12 · 0:14

GitLab patches another maximum security flaw.

,

and that same tool is implicated in Japan's horrible hacking month.

Hear this sentence

Tap a word to see its meaning in your language.

Do you know these words?

8 harder words from this episode. Tap one to see what it means, then mark it.

  • B20:14
  • B22:47
  • C13:32
  • C15:33
  • C17:53
  • B28:53
  • B210:23
  • C112:01

Mark a few words and we'll tell you how this episode fits your level.

Is this episode right for you?

B2

B2 · Upper-intermediate

Comfortable if you already follow TV news

A1 21%A2 45%B1 29%B2 4%C1 1%
  • 95% of the words are B1 or easier.
  • 131 words a minute: a natural pace.
  • 79 harder words (B2 and up) in the whole episode.

Transcript

The opening of the episode. The whole transcript is in the player.

0:00

Attackers were exploiting PHP to shell days before the patch landed. Two critical Linux flaws go public before there's a patch. GitLab patches another maximum security flaw. Microsoft says an AI tool was used in the ConnectWise breach,

0:18

and that same tool is implicated in Japan's horrible hacking month. This is Cybersecurity Today for Friday, October 23, 2026. I'm your host, David Shipley. Let's get started.

0:33

PHP to Shell started at least four days before the patch. Amazon Threat Intelligence says attackers started going after two critical PHP remote code execution flaws on Saturday, October 17th.

That was the opening. The rest of the episode (12 min) is in the player: every word clickable, with translation, saved words and flashcards.

Continue in the player

Automatically generated from the audio. May contain errors. Audio belongs to its publisher and is played from their feed. Rights holders can request removal — copyright & takedown policy