Daily Briefing
SMB Cyber Briefing
A free weekday briefing on the cyber threats that matter to small and medium-sized businesses, with practical actions you can take.
Prepared automatically from public sources (CISA, FBI/IC3, NIST and security news). Verify advisories with the original source before acting.
Latest edition ·
PHP2Shell: CISA confirms active exploitation of critical PHP flaws CVE-2026-109618 and CVE-2026-109619 - patch web servers now
Download PDFPreview
Scroll inside the frame to read the whole briefing. Links to sources open in a new tab.
Previous editions
CISA and FBI #StopRansomware alert: SafePay ransomware has hit 600+ organizations via VPN and firewall flaws and stolen passwords; patch edge devices and enforce MFA now
PHP2Shell: two critical PHP flaws (CVE-2026-109618, CVE-2026-109619) under mass attack; CISA urges all PHP website owners to patch now
SafePay ransomware: CISA and FBI warn 600+ organizations hit via SonicWall, Cisco and Veeam flaws, with attackers wiping backups
CISA/FBI #StopRansomware alert: SafePay ransomware has hit 600+ organizations via SonicWall and Cisco VPN flaws and Veeam backup servers, wiping backups before encryption
ConnectWise app credentials abused to break into Microsoft 365 tenants; Cloud Backup suspended. Also: actively exploited Ivanti Connect Secure and BeyondTrust Remote Support flaws.
BeyondTrust Remote Support zero-day (CVE-2026-102764) exploited by China-linked hackers; CISA urges patching by Oct 19 amid a week of exploited VPN and firewall flaws
Ivanti Connect Secure VPN zero-day CVE-2026-104935 under active exploitation, with one chained flaw still unpatched