Daily Breach Brief: PHP2Shell, VeloCloud Zero-Day, and a Poisoned AI Library
Alex and Jordan break down Friday Oct 23's cybersecurity news: PHP2Shell flaws exploited before patches existed, an Arista VeloCloud zero-day, a backdoored LiteLLM release on PyPI, exploited BeyondTrust and PAN-OS flaws, a CVSS 10 GitLab bug, a public FortiSIEM exploit, and the fallout from Microsoft's record Patch Tuesday.
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.