BoscoBytes | Cybersecurity & Architecture @BoscoBytes

THE INTERNET IS GOING INTO LOCKDOWN Two critical flaws in PHP, the code behind about 70% of websites. Hacking attempts went from thousands to MILLIONS in hours (Cloudflare CEO). Government portals, hospitals and banks are pulling their sites offline. And it’s not the only attack this week: → Capcom: 11.7M emails exposed → SBI: customer records on the dark web → 400+ Latin American banks hit by AI agents They’re calling it “Black October.” 😨 Follow me for more updates 🔔

‼️ Fortinet Urges Patching Critical Flaws Affecting FortiOS, FortiManager, & FortiAnalyzer Details: cybersecuritynews.com/fortinet-urges… Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated release addresses critical and high-severity vulnerabilities, including flaws found through AI-assisted security testing. The company said customers should address internet-facing devices first. The update follows security releases for FortiMail and FortiAuthenticator, extending the patching effort across several key products. Fortinet said its testing program uses advanced AI models to examine code paths, protocol handling, and configuration logic. #cybersecuritynews

‼️ BREAKING: Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability Details: cybersecuritynews.com/emergency-java… Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital certificates. Published on October 21, 2026, the alert assigns the flaw a CVSS 3.1 score of 9.1 and covers Oracle Java SE and GraalVM. The update blocks affected intermediate certificate authority certificates linked to eMudhra. According to Oracle’s security advisory, the issue affects the Java Secure Socket Extension, or JSSE, component. Oracle rates exploitation as low complexity, with no authentication or user interaction required. Successful attacks can expose or change sensitive data, although the risk matrix lists no availability impact. #cybersecuritynews #vulnerability

Hackers Use Claude to Plan Ransomware Attacks #CyberSecurity #cybernews #ransomwareattack

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.

I hope Kenya incident response teams have started the same because more than 1500 servers are affected. “HOPE” is the keyword here.

NSA Cyber @NSACyber

3 days ago

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or

1K 11K 70K 12.4M 17K

Cloudflare Detects Early Exploitation Attempts Targeting Two Leaked PHP Vulnerabilities Details: cybersecuritynews.com/php-early-expl… Cloudflare says it is seeing early attempts to exploit two critical PHP vulnerabilities whose details surfaced before the PHP security team’s planned release. The company has deployed an initial set of Web Application Firewall (WAF) rules to block known exploit patterns. Cloudflare says the rules are available to all customers, including those on free plans, and that it is updating them as new patterns appear. The warning raises the urgency for teams running PHP websites, but the firewall rules are only a temporary layer of protection. #cybersecuritynews

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software thehackernews.​com/2026/10/eight-emudhra-ca-keys-compromised.​html

U.​S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases thehackernews.​com/2026/10/us-orders-deepseek-removed-from-federal.​html

Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites thehackernews.​com/2026/10/attackers-abuse-updraftcentral-keys-to.​html

‼️ PHP Warns of Two Critical 9.2 Security Vulnerabilities, Urges Users to Prepare for Patches Details: cybersecuritynews.com/php-to-issue-e… The PHP security team has warned users about two critical vulnerabilities and urged administrators to prepare for an upcoming security release. Both flaws carry a CVSS v4.0 score of 9.2. Updates are scheduled for Wednesday, October 21, 2026, at 14:00 UTC, giving website owners and hosting providers a short window to prepare. Public reporting links the upcoming fixes to CVE-2026-109618 and CVE-2026-109619. Security firm watchTowr describes them as reported remote code execution vulnerabilities, which could allow attackers to run their own code on affected servers. However, PHP’s advance notice does not name the CVEs or explain how the flaws work. Reports suggest the vulnerabilities could affect PHP versions from PHP 5 onward. #cybersecuritynews

@TechGroupKenya So the app is ending Mpesa monopoly but I still need to use mpesa to add funds to the app. How is the app ending Mpesa monopoly help me understand.

Want to hide yourself and become anonymous while hacking? -----> Use Proxy Chaining #EthicalHacking

North Korean cyber actors continue infiltration efforts of international defense, aerospace, nuclear, and engineering sectors. We teamed up with U.S. and foreign agencies to release joint cybersecurity guidance to help mitigate these threats. nsa.gov/Press-Room/Pre…

🚨 Hackers Registered New Teams-Based Domains and Used a Login Page to Steal Your Logins Details: cybersecuritynews.com/teams-domain-l… A newly registered domain copies Microsoft Teams’ login page and interface, raising concerns about a phishing attempt targeting workplace users. Security researcher Steven Lim reported that teams-cloud[.]live was just five days old when he flagged it on October 18, 2026. He urged organizations to block the address before employees encounter the fake site. A copied Teams screen could persuade employees to trust a sign-in request. However, the available report does not establish how many people visited the site, whether passwords were captured, or who operates the domain. #cybersecuritynews

Top Cyber Attacks - 2026 via @The_Cyber_News

The future is uncertain but we move regardless

WATCH: Rare pink dolphin spotted off the coast of Oman

The goal is not more controls for their own sake. It is to reduce the blast radius when one integration fails. For East African fintech, resilience depends on secure APIs, disciplined secrets management, least privilege, strong observability and tested incident response.

6. Zero trust at the integration layer Do not assume traffic is safe because it comes from an internal network, partner or known app. Authenticate and authorize each service-to-service request, encrypt traffic, log sensitive actions and continuously evaluate access.

Kenya’s National KE-CIRT/CC reported about 2.4B cyber threats detected in Apr–Jun 2026. For fintechs, SACCOs and MFIs, the integration layer—APIs, webhooks and middleware—deserves the same scrutiny as core banking systems. Here are 6 common risks. 🧵