Daily Brief
exploited flaws, supply chain abuse and data breaches
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
CISA has added the PHP2Shell vulnerabilities to its actively exploited catalog and ordered federal agencies to patch by Thursday. The flaws enable unauthenticated remote code execution, so exposed PHP systems are at immediate risk if left unpatched.
Identify internet-facing PHP systems now, confirm whether they are affected by PHP2Shell, and prioritise emergency patching or isolation this week.
Energy giant ENGIE discloses data breach affecting customers
ENGIE says attackers stole customer data after breaching a marketing platform used by business partners. The case shows how third-party platforms can become a route into customer data even when core systems are not directly hit.
Review every external marketing and partner platform with access to customer data, then verify logging, access controls and breach notification contacts this week.