CERT24ThreatsDay: Weekly Cybersecurity News Roundup
The weekly roundup describes continued PHP2Shell scanning and exploitation attempts, 40,573 exposed secrets found in FortiGate configurations, abuse of institutional domains through DNS shadowing, 26,400 verified-live credentials found in public Gitee repositories, and several active or disclosed attack campaigns. It also covers Fortinet security updates, a patched Microsoft Authenticator flaw, abuse of camera management software, a 68 GB theft from a Philippine government agency, scanners impersonating AI agents, and GitHub supply-chain compromise.