Security Weekly News: PHP Exploitation, AI-Agent Risks and Microsoft 365 Token Theft
· 28:23 · Watch on YouTube ↗
Summary
The episode covers actively exploited PHP flaws, personal data exposed in a University of Copenhagen test environment, malicious files targeting AI agents, Microsoft 365 token theft, and cyber-enabled cargo theft.
Key points
- The host says CISA added two critical PHP flaws to its actively exploited vulnerabilities catalog. PHP had patched them on October 21; reports differed on whether observed exploitation had succeeded.
- The University of Copenhagen confirmed attackers accessed a test environment containing personal data for about 525,000 people, including names, national identity numbers, phone numbers and email addresses.
- Forever Security found a malicious agents.md file disguised as engineering notes. The host warned that an AI agent with access to local folders and the internet could be influenced by such files, and recommended policies limiting agent permissions.
- A Microsoft Authenticator flaw reportedly let permissionless Android apps impersonate trusted Microsoft apps and steal work-account tokens. Microsoft said it knew of no attacks exploiting the flaw, which has been patched.
- Huntress reported attacks against 79 Microsoft 365 organizations from July to September using authentication relays and device-code phishing. In 19 organizations, attackers reportedly replaced MFA and registered devices; Huntress said it saw no money moved.
- The speaker recommended checking for attacker-added devices and MFA, restricting device registration and unnecessary device-code sign-ins, alerting on MFA changes, and using passkeys or security keys where possible.
- NBC News reported more than $100 million in data-center freight stolen since June. The episode describes GPS spoofing, compromised freight-broker accounts, fake shipment listings and links that install software.
Article Details
- Topics
- [01:15] Actively exploited PHP vulnerabilities, patching and reported exploitation
- [04:06] Attackers accessed a University of Copenhagen test environment containing personal data
- [06:44] Malicious markdown files and indirect prompt injection risks to AI coding agents
- [08:53] Patched Microsoft Authenticator flaw and work-account token exposure
- [11:03] How management incentives can undermine cybersecurity controls
- [15:17] Autonomous AI-agent capabilities and the need for policy and controls
- [18:51] Microsoft 365 phishing relays, token theft, account persistence and defenses
- [25:38] GPS spoofing and cyber-enabled theft of data-center cargo
MITRE ATT&CK
T1078 · Valid AccountsAttackers reportedly used compromised freight-broker accounts to post fake shipments and bid on real cargo.T1190 · Exploit Public-Facing ApplicationThe host says attackers exploited two PHP flaws for remote code execution, including against internet-facing PHP services.T1528 · Steal Application Access TokenHuntress reportedly observed attackers copying Microsoft 365 session tokens and using them from their own machines.