OpenSight News Flash News Flash, Monday, November 2, 2026
AI-voiced Read by an AI voice. Every item links its sources on its news page.
Transcript
This is the OpenSight News Flash for Monday, November 2, 2026. This episode is read by an AI voice.
US cyber agency confirms attacks on PHP2Shell flaws and sets a patch deadline. The two critical PHP flaws fixed on 21 October are now used in real attacks. The US Cybersecurity and Infrastructure Security Agency, CISA, added both to its catalogue of known exploited vulnerabilities on 26 October. Federal agencies had until 30 October to patch. The flaws let an attacker run code on a web server without logging in. Researchers say attempts started about four days before the patches were out. Working remote shells were later seen on test servers set up to catch attackers. The fixed versions are PHP 8.5.12, 8.4. That report is from BleepingComputer.
Google launches Gemini 4 Carbon for security work but only cyber defenders get it. Google has released Gemini 4 Carbon, a model built for software security. It can look for vulnerabilities, test whether they can be exploited and write a fix. Google calls it its strongest model so far. For now only selected cyber defenders can use it. Governments, critical infrastructure operators and large platforms come first, through a programme called Fairwind. The limit has a reason. A model that finds and exploits flaws for a defender can do the same for an attacker. That report is from Google.
Hacktivists leak details of more than 41000 US Homeland Security staff. Records on more than 41000 current and former staff and contractors of the US Department of Homeland Security have been published online. The data includes names, work emails, phone numbers, job titles and group memberships. Some entries point to sensitive roles in surveillance, forensics and undercover work. A hacktivist group took responsibility and gave the files to a transparency nonprofit. The group says it got in through a cloud single sign-on service used by the department. That report is from Government Executive.
Every item, with its sources, is on opensight.ch/news. Thank you for listening.