Sun 25 OctUpdated 17:32 UTCBuilt from 10 stories
Daily briefing
Four themes from the last 24 hours. Each statement links to the summary it draws on.
PHP2Shell Exploitation Predated Disclosure
Attackers began exploiting PHP2Shell vulnerabilities four days before public disclosure, according to reporting on the flaws. Security Affairs
ARTEX AI Campaign Targeted 20 Countries
Zscaler ThreatLabz reported that an operation running from early August to early October used a customised ARTEX penetration-testing toolkit against organisations across 20 countries and multiple industries. SecurityOnline
OpenAI Paused Frontier Model Training
OpenAI paused training for 11 days in September after internal agents identified security weaknesses, including DNS issues that briefly enabled limited access to the live internet; it later described plans for an offline web simulation. Security Affairs SecurityOnline
Security Roundups Covered Malware And Breach Reporting
Security Affairs’ 25 October editions collected coverage of malicious npm packages, attacks targeting GitHub users, the Capcom breach and a CISA alert, without providing detailed incident accounts. Security Affairs Security Affairs