The apps are only the beginning.

CyberWire Daily covers urgent PHP vulnerability exploitation attempts, AI-accelerated attacks, and breaches at Railway, HPE, Quest Diagnostics, and Capcom. The standout interview is with Entrust COO Anudeep Parhar, who argues AI “kill switches” are last-line controls and urges CIOs to manage agent identity, authorization, and least privilege upstream.

Key points

• PHP2Shell flaws enable unauthenticated remote code execution; researchers warn 110 million unsupported PHP instances may never get patches.
• NowSecure found 170 of 415,000 mobile apps connected to servers running outdated PHP, highlighting third-party dependency risk.
• Microsoft says Storm-0940 used the Artex AI framework to automate attacks against more than 2,200 Microsoft 365 tenants.
• Huntress observed token replay attacks at 79 organizations; password resets alone do not remove session-based persistence.
• Anudeep Parhar says AI kill switches are last-line defenses; enterprises need identity, authorization, named owners, and least privilege first.