VeloCloud zero-day exploited, Railway secrets breach, M365 token replay | Cyber Security News Oct 23
Attackers are exploiting a third VeloCloud Orchestrator zero-day, stolen Microsoft 365 tokens were replayed against 79 organizations from one hosting range, and Railway is telling every customer to rotate their secrets. Plus eMudhra's root leaving Chrome on October 27, and a firewall whose admin password was "password". Every version number in this episode was checked against the vendor's own advisory before it aired. Today's question: How does your team keep audit findings from turning into a pay negotiation? Reply in the comments or at feedback@defensivesecurity.org.
1. Third exploited…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.