Brotli Emergency Patches, PHP-to-Shell Exploited, and Australia Disrupts 180K Amadey Infections | Cybersecurity Today
On Cybersecurity Today (Oct. 28, 2026), Microsoft issues out-of-band .NET updates for a critical flaw in Google's Brotli library (CVE-2026-111497) that can enable remote privilege escalation and potentially remote code execution, with proof-of-concept exploits public and widespread exposure across ecosystems.
The episode also covers CISA confirming active exploitation of two "PHP to Shell" vulnerabilities (CVE-2026-109618/109619), with federal agencies facing an urgent patch deadline and broad impact across millions of PHP services and many vendors. In legal news, U.S. prosecutors allege Canadian ransomware negotiator Eduard Dubrovsky secretly worked for threat actors.
South Korean police say a former penetration tester used the Artex AI framework to breach 90+ organizations and steal 8.2 million records. Finally, Australia's Signals Directorate disrupts an Amadey botnet, cutting off 180,000 infected computers and destroying stolen data offered for sale.
00:00 Top Stories Rundown
00:32 Brotli Bug Emergency Patches
02:36 AI Noise in Vulnerability Hype
03:41 PHP to Shell Exploited Now
06:10 Ransomware Negotiator Accused
07:41 Artex AI Hacking Spree
10:04 Australia Disrupts Amadey Botnet
11:32 Wrap Up and Sign Off
Read the original article: