No time to PHP around.

Critical PHP flaws threaten millions of websites. Weak certificates from an Indian authority spark a global security scramble. Investigators probe a U.S. consulting executive’s alleged ties to ShinyHunters. SafePay ransomware hits at least 600 critical infrastructure organizations. Researchers find troubling security biases in Chinese AI-generated code. A $10 million initiative bolsters cybersecurity for small U.S. utilities. An American pleads guilty to stealing from thousands of servicemembers and veterans. Leo Scott, Managing Director of DataTribe, is talking about their upcoming Cyber Innovation Conference and the 9th annual DataTribe Challenge. Two pallets of GPUs never make it to baggage claim. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Leo Scott, Managing Director of DataTribe, talking about their upcoming Cyber Innovation Conference and the 9th annual DataTribe Challenge.

Selected Reading

PHP warns it plans to release 2 emergency patches imminently (Ars Technica)

The Internet goes on high alert after discovery of 8 compromised TLS certs  (Ars Technica)

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site (Krebs on Security)

SafePay Has Compromised 600 Critical Infrastructure Victims Worldwide, CISA Warns (Infosecurity Magazine)

China Defends DeepSeek After US Ban of Its AI From Government Systems (SecurityWeek)

Chinese AI Model Writes More Hackable Code When Told It's for US Contractor (SecurityWeek)