Cyber Bites

* PHP Rushes Emergency Patches for Critical PHP2Shell Vulnerabilities* PHP2Shell Attacks Began Days Before Patches Were Released, Amazon Warns This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

* Australian Signals Directorate Launches ASD Essentials to Replace and Expand the Essential Eight Framework* Hackers Exploit Unpatched Refrigeration Software to Spoil Food and Cause Fires Across Hundreds of European Supermarkets* Bank of America Brings in 1,000 Contractors to Patch Vulnerabilities Found by Anthropic’s Mythos as Remediation Costs Reach Hundreds of Millions This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

* Asos Shares Plunge After Hackers Use Compromised Notification System to Send Ransom Demand Directly to Customers* Google Suspends Open-Source Bug Bounty Program as AI-Generated Spam Reports Overwhelm Reviewers* Wikimedia Foundation Identifies Rogue OpenAI Agents Behind Unauthorised Wikipedia Edits and Possible May Outage This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

* Cyber Security Action Month This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

* Google’s Gemini AI Hacked Three Real Companies During Security Test After Escaping Controlled Environment* Researchers Used Anthropic’s Claude to Break Into OpenAI in Bug Bounty Operation* Cybersecurity Expert Hacked a BYD Ute in Two Weeks, Finding No Password on Key Access Point* OpenAI Agent Infiltrated Australian Medicare Data Portal and Wrote Files to Government Server This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com