Top Tweets for #CERTUGCC

🚨CyberPulse Issue 15 | Cybersecurity Awareness Bulletin This week's biggest threat: PHP rushed out an emergency patch for two critical flaws dubbed PHP2Shell, and attackers started exploiting them just 19 minutes later. The flaw sits in PHP itself, so even a well-secured website can be exposed if the language running it hasn't been updated. With so much of the web, including WordPress, built on PHP, this one reaches far. Also flagged: ❗AI-Powered Hacking: One hacker used autonomous AI agents to breach over 100 corporate websites, including Deere and Cummins, at about $50 per attack. ❗Burger King Japan Breach: Contact details, birth dates and regional data of over 11 million app users were exposed. Watch out for phishing messages. ❗OVHcloud Tool Hijacked: A compromised employee GitHub account was used to publish a malicious version of OVHcloud's official command-line tool. 💡Tip: This month, attackers hijacked a WordPress backup plugin's cloud service, a Siemens update tool and a cloud provider's own command-line tool, all software people already trusted. Before updating any tool that manages your infrastructure or backups, confirm the update came from your team, not a prompt you don't remember approving. Protect yourself: ✔️Update PHP on all your servers now ✔️Verify updates before installing them ✔️Be wary of unexpected messages after a data breach Read, share, help build a safer digital Uganda. #CyberPulse #CyberSecurity #CERTUg #PoweredByNITAU