FlexiLingo
AI agents behind ConnectWise breach, PHP2Shell exploited days before patches, Japanese cloud hack
- 新闻
- 科技
PHP Exploited Before Patch, Unpatched Linux SMB Bugs, GitLab Max-Severity Fix, and AI Agents in ConnectWise & Japan Breaches Cybersecurity Today (Oct. 23, 2026) covers active exploitation of two critical PHP RCE flaws beginning at least four days before patches shipped, with multiple firms seeing failed pre-disclosure attempts and the UK NCSC urging immediate patching or taking servers offline. It also details two publicly disclosed, unpatched Linux kernel ksmbd SMB RCE bugs (one unauthenticated on port 445), exposed after ZDI credited Trend Micro's AI scanner and copied public mailing lists without patches. GitLab issued fixes for a maximum-severity unauthenticated...
打开播放器：完整文字稿，每个单词都可点击，附翻译和单词卡。
这一集适合你吗？
B2 · 中高级
能看懂电视新闻就会觉得轻松
- 95% 的单词在 B1 或更简单的水平。
- 每分钟 131 词：自然语速。
- 整集共有 79 个较难的单词（B2 及以上）。
试一试：点任意单词
来自本集开头的真实句子，每个单词都标出了难度级别。
GitLab patches another maximum security flaw.
,
and that same tool is implicated in Japan's horrible hacking month.
点一个单词，用你的语言查看释义。
这些单词你认识吗？
本集中 8 个较难的单词。点一个查看释义，然后标记一下。
标记几个单词，我们会告诉你这一集是否适合你的水平。
这一集适合你吗？
B2 · 中高级
能看懂电视新闻就会觉得轻松
- 95% 的单词在 B1 或更简单的水平。
- 每分钟 131 词：自然语速。
- 整集共有 79 个较难的单词（B2 及以上）。
文字稿
本集开头部分。完整文字稿在播放器中。
较难的单词（B2+）
Attackers were exploiting PHP to shell days before the patch landed. Two critical Linux flaws go public before there's a patch. GitLab patches another maximum security flaw. Microsoft says an AI tool was used in the ConnectWise breach,
and that same tool is implicated in Japan's horrible hacking month. This is Cybersecurity Today for Friday, October 23, 2026. I'm your host, David Shipley. Let's get started.
PHP to Shell started at least four days before the patch. Amazon Threat Intelligence says attackers started going after two critical PHP remote code execution flaws on Saturday, October 17th.
以上是开头部分。 本集其余部分（12 分钟）在播放器中：每个单词都可点击，附翻译、生词收藏和单词卡。
在播放器中继续由音频自动生成，可能存在错误。 音频版权归其发布者所有，并从其订阅源播放。版权所有者可申请删除 — 版权与删除政策