The apps are only the beginning.

This CyberWire Daily episode compiles multiple active cybersecurity events: attackers exploiting critical PHP flaws and ArubaOS RCE/auth bypasses, Mirai botnet involvement in PHP2Shell attacks, a confirmed cyberattack on Railway prompting key revocations, disruptive intrusions at Quest Diagnostics, a Capcom user data breach, China-linked APTs using an AI pentest tool in ConnectWise attacks, and a Microsoft 365 token spray/replay campaign that bypasses MFA — plus industry commentary on AI risks.