Tootfinder

Before you leave for the weekend after this seriously intense cyber week, check out today's Metacurity for the most important infosec developments you should know, including
--Banks scramble to keep uncontrolled AI agents out of customer accounts,
--eMudhra quits cert business after browsers pull trust,
--PHP flaws spark alarm but little confirmed damage,
--PHP crisis blacks out SoftBank disaster alerts as Japan plans AI cyber team,
--Capcom breach exposes 11.7m customer email records,
--Quest Diagnostics breach puts patient records at risk,
--FCC blocks two devices with Huawei surveillance chips,
--Researchers find gaps in OpenAI’s agent monitoring,
--Suspected DDoS attack knocks North Korean sites offline,
--Australia sanctions North Korean IT worker network,
--Russian hackers hide behind mesh network in Ukrainian grain attack,
--Critical Linux flaws go public before patches are ready,
--Anthropic says Claude proves crash protections across 123 libraries,
--Upwind rebuffs Datadog’s $4B acquisition offer,
--Volunteer PHP maintainer hailed as patching hero,
--Anthropic hands Agent Skills standard to AI foundation,
--AI bug hunting threatens more waves of disruption
https://www.metacurity.com/banks-scramble-to-keep-uncontrolled-ai-agents-out-of-customer-accounts/

Devino (@devino_fr) #237 - Mot du jour
6/6
🟦⬛🟦⬛⬛
🟦⬛⬛⬛⬛
🟦⬛⬛⬛⬛
🟦⬛⬛⬛⬛
🟦🟦⬛⬛🟨
🟦🟦🟦🟦🟦
Vous relevez le défi ?
#Devino #MotDuJour

Tabling for my Department (Historical Studies) at our campus open house. I love the stickers a colleague brought (though am distressed at the likelihood that many were created by AI).

Which means y'all paying for that.
Religion Clause: New Law Allows Clergy to Opt Back Into Social Security and Medicare
http://religionclause.blogspot.com/2026/10/new-law-allows-clergy-to-opt-back-into.html

In today's Metacurity, I managed to wrestle yesterday's firehose of PHP patch-related news into sixteen paragraphs, in case you're short on time for some reason.
Also in today's issue are tons of other critical infosec developments you should know, including
--Claude flags 493 security gaps across 25 open-source projects,
--OpenAI agents disable safeguards meant to monitor them,
--Interpol operation nets 1.4k arrests and recovers $105m in African cybercrime op,
--Toronto Crime Stoppers halts tips after 1.5m-tip breach,
--LiteLLM supply chain attack steals credentials and plants a backdoor,
--Chinese hackers use AI tool to breach ConnectWise,
--Pentagon builds secret agency for foreign tech sabotage,
--Cybercriminals bypass AI safeguards to automate attacks,
--Meta hit with $25B penalty for misleading users on privacy,
--GitLab patches maximum-severity flaw allowing unauthenticated code execution,
--Cyberattack knocks Richmond schools’ internet, phones and email offline,
--Pentagon faces class action over breach exposing military personnel data,
--Democrats warn of Russian disinformation targeting midterm candidates,
--Federal intelligence center invokes extremism in warning over Flock meeting
https://www.metacurity.com/php2shell-sparks-a-global-patch-panic/

I rose early to get Metacurity out before 10 am ET, when, apparently, chaos could reign for PHP-enabled sites.
So don't miss today's issue for more on this crucial development and other critical infosec news you should know, including
--Weak eMudhra keys trigger massive internet security cleanup,
--Russian hackers breach NATO defense firms and police agency,
--Delivery robots face lawsuits over alleged biometric scans,
--State Bank of India breach exposes nearly 4k customer records,
--Hackers execute unauthorized trades at Japanese brokerage,
--Vendor breach puts 125k Japanese police records at risk,
--Malaysia bans Waze for civil servants over Israel ties,
--Friend says he urged teen to abandon alleged FBI hack,
--SafePay ransomware gang breaches at least 600 organizations,
--Zeabur to shut down after breach exposes 3.2m environment records,
--Save-On-Foods breach exposes loyalty customers’ personal data,
--AI agent joins researchers’ listserv and sparks privacy concerns,
--AI security jobs look familiar to cybersecurity veterans,
--Viral software clones threaten to spread AI slop,
--Democrats press tech giants over retreat from election safeguards,
--Musk ordered Starlink slowdown that rattled Ukraine,
--Hackers disrupt Russian school tests with anti-Putin message
https://www.metacurity.com/php-urges-immediate-patching-as-details-of-two-critical-flaws-reportedly-leak/

AI-discovered bugs may soon trigger fresh disruptions, cyber experts say
https://www.reuters.com/legal/litigation/ai-discovered-bugs-may-soon-trigger-fresh-disruptions-cyber-experts-say-2026-10-23/

Disgraced eMudhra drops out of TLS business after using cert private key of 4
https://arstechnica.com/security/2026/10/disgraced-emudhra-drops-out-of-tls-business-following-certificate-debacle/?mid=1#cid=3769663

Somehow I missed this...
https://www.theregister.com/security/2026/10/22/php-blames-supply-chain-security-biz-chainguard-for-putting-huge-chunks-of-the-web-at-risk/5304611

Resident Evil Developer Capcom Issues Phishing Warning After Data Breach Hits Over 11 Million Customer Accounts
https://www.ign.com/articles/resident-evil-developer-capcom-issues-phishing-warning-after-data-breach-hits-over-11-million-customer-accounts