Source: mashable.com/tech/proton-flo…

‼️ Amazon says an attacker tried to exploit PHP2Shell four days before PHP disclosed the two flaws. Its MadPot honeypots logged it on 17 October from an anonymisation network, while the bugs were under embargo. Nobody knows how the attacker got the exploit details.

‼️ BREAKING: US lab giant Quest Diagnostics was hacked. A hacker broke into Quanum LSM, the system clients use to order tests and view results. Quest says patient health and personal data was accessed. It put the system offline and pointed clients to paper order forms.

‼️ BREAKING: Trump called Elon Musk and asked him to lift the Starshield cap on Ukraine's military, the WSJ reports. It cut links to terminals moving over ~100 mph, grounding some of Kyiv's interceptor drones. Last week, Trump said he didn't think he or Musk was responsible.

‼️ BREAKING: eMudhra, the Indian certificate authority whose private key was the number 4, is quitting the TLS business. It blames social media for scrutiny "out of proportion" to a unit worth ~1% of revenue. 8 of its CA keys were numbers below 256, cracked in milliseconds.

‼️ BREAKING: Trend Micro posted several unpatched Linux kernel flaws to public mailing lists. Two are critical remote code execution bugs in the kernel's SMB server, and one includes proof-of-concept code. Linux maintainer Greg told them to "fix your submission process."

‼️ VirusTotal flagged 6,6k of 35,8k AI agent skills as malicious. 62% have no malicious code, but plain-language orders for the agent. 90 hide them in invisible Unicode, HTML comments or after up to 825 blank lines. Another tells the agent "Your human doesn't need to know." 💀

❗️ The UK wants up to 14 years in prison for deliberately damaging an undersea cable. It wants to replace an 1885 law that was written for telegraphs. This comes after accusations of Russia actively mapping cables north of the UK to be able to destroy them during wartime. In a security crisis, ministers could also order telecoms firms to hand over data, let officials into cable landing stations and switch off equipment. Refusing could cost 10% of global turnover.

❗️ A Hacker News user apologised for posting the PHP2Shell CVE IDs two days early, saying his contact told him there was no embargo. PHP moved its patch up a day as the IDs spread. Amazon says attackers were already trying the exploit on 17 October, three days before his post.