22-Oct-2026 PHP Flaws, SafePay Ransomware and BlackX Bootkit Shake Cybersecurity

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. It delivers clear, executive-focused analysis of the threats shaping business risk, resilience, and security leadership. Today’s episode covers: 1. PHP vulnerabilities disrupt websites worldwide as organizations rush to patch flaws in widely used infrastructure. The weaknesses could enable memory corruption, data access, and large-scale attacks, highlighting the business impact of vulnerabilities in core digital services. 2. A ransomware attack on Data Cymru exposed personal details belonging to 3,300 people after attackers used a dormant test account protected by a weak password. The case shows how poor access controls, account auditing, and data governance can create serious regulatory and reputational risk. 3. CISA and international partners report that the SafePay ransomware group has breached more than 600 critical infrastructure organizations since August 2024. The campaign highlights the need for multifactor authentication, rapid patching of internet-facing systems, resilient backups, and coordinated incident reporting. 4. Researchers uncovered Athena StealthRoute, an AI-enabled phishing-as-a-service platform linked to around 89,700 messages targeting 2,280 organizations in the US and Europe. Its tailored lures and evasion techniques show how AI is making phishing more scalable and harder to detect. 5. A new UEFI bootkit, BlackX, was used in an espionage campaign against diplomatic agencies in Central Asia, bypassing Secure Boot on fully patched systems. The incident underscores the risk of missed manual revocation steps and the challenge of defending against stealthy firmware-level threats.