PHP vulnerabilities update, ConnectWise AI spies, Africa cybercrime takedown

Railway says intruder may have accessed customer secrets

https://thehackernews.com/2026/10/railway-says-intruder-may-have-accessed.html

Law enforcement disrupts nearly 11,000 cybercrime networks in Africa

https://www.bleepingcomputer.com/news/security/authorities-disrupt-nearly-11-000-cybercrime-networks-in-africa/

ConnectWise breach let Chinese AI spies move in on cloud tenants

https://www.theregister.com/security/2026/10/22/microsoft-says-connectwise-breach-let-chinese-spies-loose-on-2250-cloud-tenants/5304687

GitLab warns of new maximum severity code execution vulnerability

https://www.bleepingcomputer.com/news/security/gitlab-warns-of-new-max-severity-code-execution-vulnerability/

Hundreds of websites taken offline due to PHP vulnerabilities (continuing coverage)

https://therecord.media/php-script-vulnerabilities-warnings

https://www.bleepingcomputer.com/news/security/amazon-says-php2shell-exploitation-began-4-days-before-patches/

Splunk, SolarWinds release fresh security updates

https://www.securityweek.com/splunk-solarwinds-release-fresh-security-updates/

Lazarus hackers use post-quantum cryptography for malware delivery

https://www.bleepingcomputer.com/news/security/chrome-switching-to-nist-approved-ml-kem-quantum-encryption/

South Carolina officials offer assistance after state capital hit with cyberattack

https://therecord.media/south-carolina-officials-offer-assistance-cyber-incident

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-23-2026/

Huge thanks to our episode sponsor, ThreatLocker

AI risk does not only come from attackers. Employees are adopting AI tools faster than many organizations can evaluate them. Today's tip: an AI policy should be backed by enforceable controls over what tools can access and do. See how ThreatLocker can help you govern AI use at threatlocker.com/ciso.