Cybersecurity news, intelligence & practical insights. Helping professionals stay informed, prepared & secure. | 5 Minute Cyber Brief ⚡
United States
Joined November 2018
- Tweets3.2K
- Following1.5K
- Followers2K
- Likes3.2K
ConnectWise plans to start restoring Cloud Backup (formerly SkyKick) today. Before you reconnect, check each Microsoft 365 tenant: the seven app IDs still blocked, no app secrets nobody added, sign-in logs exported before they age out.
cyberexperts.com/2026-10-26-…
HPE fixed 72 bugs in Aruba AOS-8 and AOS-10, and eight are rated 10.0 with no login needed (CVE-2026-79844 to 79851). Upgrade to 10.8.1.2, 10.7.2.7, 10.4.1.14, 8.13.3.1 or 8.10.0.24, and block UDP 8211 where nothing needs it.
cyberexperts.com/2026-10-26-…
Thinking about cybersecurity in your 30s, 40s or 50s? Age alone isn't a disqualifier. Our 4-step plan: build fundamentals, practice in a home lab, then aim for a first role where your past experience counts, like analyst, GRC or IAM.
cyberexperts.com/how-to-tran…
A regular cell call is encrypted only between your phone and the tower, and your carrier can still access it. For end-to-end encrypted calls, use Signal, FaceTime Audio (Apple to Apple) or WhatsApp. Setup steps for iPhone and Android:
cyberexperts.com/how-to-encr…
Almost every phishing email wants the same thing: for you to act fast. Five giveaways to look for: a sender address that doesn't match the real organization, odd wording, suspicious links or attachments, false urgency and a generic greeting.
cyberexperts.com/what-do-vir…
Asymmetric encryption clicks once you try it with small numbers. Our guide walks through RSA step by step with values you can check on a calculator, then shows where public-key cryptography shows up every day, and what post-quantum changes.
cyberexperts.com/asymmetric-…
Friday's brief: a 10.0 GitLab fix for self-hosted servers, an exploited VeloCloud console, a poisoned LiteLLM release and PHP2Shell logs to read back to Oct 17. Here's the order we'd take them.
cyberexperts.com/2026-10-23/…
Amazon's honeypots caught a PHP2Shell exploit attempt on Oct 17, four days before PHP shipped the fix. Patched isn't the same as clean: check web logs and web roots back to Oct 17.
cyberexperts.com/2026-10-23-…
CyberExperts.com retweeted
PHP shares mitigation for new RCE vulnerability with no patch
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
LiteLLM 1.107.0 was malware for about two hours on Oct 21: it stole cloud, AI and CI keys on any machine that installed it. Check pip show litellm, rebuild on 1.106.2 and rotate everything that host could reach.
cyberexperts.com/2026-10-23-…
Network+ myth or fact: is an employee ID badge a logical access control? Decide, then check the verdict in the video. More Network+ practice questions, always free, no card.
lab.cyberexperts.com/tracks/…
Self-hosted GitLab has a 10.0 flaw that lets someone with no account run code on the server. Every version since 7.0. GitLab.com is patched; yours isn't until it runs 19.5.1, 19.4.3 or 19.3.6.
cyberexperts.com/2026-10-23-…
Attackers are exploiting a new VeloCloud Orchestrator flaw (CVE-2026-114625, 9.9) that turns the lowest read-only login into a superuser. Upgrade on-prem VCO to 5.2.3.18, 6.1.3.10 or 6.4.2.12 and block the two IPs Arista published.
cyberexperts.com/2026-10-23-…
Thursday's brief: Fortinet's firewall fixes land today, a 9.8 root bug in Cisco Expressway, a trust-store update for the eMudhra certificate mess, and PHP2Shell. Here's the order we'd take them.
cyberexperts.com/2026-10-22/…
PHP2Shell patches are out (8.5.12, 8.4.27, 8.3.36, 8.2.35) and attack attempts are already hitting sensors. Restart every PHP worker and check the version that is actually serving requests.
cyberexperts.com/2026-10-22-…
CyberExperts.com retweeted
The PHP patches are out, which means attackers now know what to look for. @mosesrenegade, Senior Instructor at SANS Institute shared what to do first on yesterday’s emergency livestream. Versions 8.2 and up get the fix. Earlier versions don’t. go.sans.org/MpvmG6
#PHP #infosec
Browsers already block eMudhra's eight broken intermediate certificates. Your containers, Go binaries and Python tools may not. Update ca-certificates, Go 1.27.3/1.26.10 and certifi, then rebuild.
cyberexperts.com/2026-10-22-…
CISA question of the day: what's the MAIN concern with single sign-on? Pick A, B, C or D, then check the answer in the video. More CISA practice questions, always free, no card.
lab.cyberexperts.com/tracks/…
Fortinet ships critical fixes for FortiOS, FortiManager and FortiAnalyzer today and won't publish the advisories until Nov 10. FortiOS 7.6.8, 7.4.13 and 7.2.14. Internet-facing firewalls first.
cyberexperts.com/2026-10-22-…
Clustered Cisco Expressway servers can be taken over as root without a login: CVE-2026-76466, rated 9.8, no workaround. Upgrade to X15.5.20, then move Unified CM to 15SU5.
cyberexperts.com/2026-10-22-…
