Daily Brief
Daily Brief, October 27, 2026
Cyberr Brief2 stories
PHP2Shell security flaws now sucessfully exploited in the wild
Two critical PHP2Shell RCE flaws have been successfully exploited in the wild. The report says the bugs can enable remote code execution, so exposed PHP systems need urgent attention.
What to do
BleepingComputer↗Identify internet-facing PHP systems in your estate and apply the relevant emergency fixes or compensating controls this week.
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Researchers have tied a Microsoft 365 campaign to adversary-in-the-middle token replay, with 97 accounts at 79 organisations compromised. It shows that stolen session tokens can bypass password-based controls and lead to mailbox access without a traditional login.
What to do
The Hacker News↗Review Microsoft 365 sign-in logs for unusual session replay patterns and enforce stronger session protection where available.