Commzgear Podcast

Commzgear Podcast, Episode 13 (relaunch): PHP2Shell, Tailworm, WPSplinter and CMMC limbo. Current as of Oct 30, 2026.

• PHP2Shell (CVE-2026-109618, CVE-2026-109619): Exploited in the wild and added to CISA KEV on Oct 26. Fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Investigate logs back to Oct 17. It's being chained with the Linux kernel flaw Fragnesia (CVE-2026-46300), which was disclosed and patched in May 2026.
• Tailworm: Update Tailscale to 1.104.4 or newer (bulletins TS-2026-014 to TS-2026-017). Interim mitigation: set TS_SSH_DISABLE_FORWARDING=1 in /etc/default/tailscaled on Linux and restart tailscaled. This breaks SSH tunneling and doesn't replace the update. Headscale server-side fixes were still pending as of Oct 28.
• WPSplinter: Broadcom legacy WPS Monitor bug, with no CVE. Disable WPS, check firmware, ask your ISP in writing, replace end-of-life gear, or bridge the ISP gateway behind your own router.
• CMMC: Phase 2 is paused with no new date. Phase 1 self-assessments and DFARS 252.204-7012 still apply.

1. The Hacker News, "CISA confirms active exploitation of PHP2Shell" (Oct 27, 2026): https://thehackernews.com/2026/10/cisa-confirms-active-exploitation-of.html
2. Techzine, "PHP2Shell was exploited four days before disclosure, says Amazon" (Oct 22, 2026): https://www.techzine.eu/news/security/145197/php2shell-was-exploited-four-days-before-disclosure-says-amazon/
3. IT-Connect, "PHP2Shell: Attackers Had a Four-Day Head Start Before the Patch" (Oct 23, 2026): https://www.it-connect.tech/php2shell-attackers-had-a-four-day-head-start-before-the-patch/
4. Unite.AI, "Dream Reports PHP2Shell Attack Chain That Compromised 25 Servers" (Oct 27, 2026): https://www.unite.ai/dream-reports-php2shell-attack-chain-that-compromised-25-servers/
5. Tenable, "Fragnesia (CVE-2026-46300): Frequently asked questions" (May 14, 2026): https://tenable.com/blog/fragnesia-cve-2026-46300-faq-about-new-linux-kernel-xfrm-esp-in-tcp-priv-esc
6. Konfirmity, "Tailworm: Tailscale SSH flaws" advisory (published Oct 25, updated Oct 28, 2026): https://www.konfirmity.com/advisories/tailscale-ssh-tailworm-vulnerabilities
7. Techzine, "Broadcom WPSplinter vulnerability leaves millions of Belgian routers vulnerable" (Oct 19, 2026): https://www.techzine.eu/news/security/145085/broadcom-wpsplinter-vulnerability-leaves-millions-of-belgian-routers-vulnerable/
8. PCWorld, "Millions of routers have a 16-year-old flaw that nobody plans to fix" (Oct 20, 2026): https://www.pcworld.com/article/3265053/millions-of-routers-have-a-16-year-old-flaw-that-nobody-plans-to-fix.html
9. Federal News Network, "DoD's reasons for CMMC pause falling apart in face of RFI responses" (Oct 26, 2026): https://federalnewsnetwork.com/defense-news/2026/10/dods-reasons-for-cmmc-pause-falling-apart-in-face-of-rfi-responses

Hosted on Acast. See acast.com/privacy for more information.

1. WWDC 2023: Here's everything to expect at Apple's special event this year
2. Bluesky launches alternate feeds with custom algorithms
3. USB-C on iPhone 15: The latest rumors and what to expect
4. Messages Magic Compose Beta starts rolling out
5. The summer of foldables starts this week
6. Amazon's new Android tablet is the 'future of computing' that Google wants
7. Here are some Google Bard features you might not know about
8. Fortinet Survey Reveals a Disconnect between Ransomware Preparedness and Prevention
9. OT on the Global Stage and at Warp Speed
10. No Matter Where Your Employees Go, There You Are

Hosted on Acast. See acast.com/privacy for more information.

Podcast Notes Summary:

1. Juniper Networks and ServiceNow Collaboration:
2. Juniper Networks Introduces Cloud-Native Access Assurance Service:
3. TP-Link Omada:
4. Android-iPhone Text Message Bug:
5. Android Users Switching to iPhone at Highest Level:
6. iPhone Beats Samsung in Satisfaction Survey:
7. Google One IP Address Sharing:
8. Pixel 8 Pro Temperature:
9. Samsung Considering Switch to Bing Search Engine:
10. Pixel 2023 Buyer's Guide:
11. Motorola Razr Plus Outer Display and Keyboard:
12. Network Firewalls (NGFW) Predictions:
13. World Economic Forum Growth Summit Key Insights:
14. FleeceGPT Mobile Apps Target AI Curious:
15. The Phantom Menace: Brute Ratel Remains Rare and Targeted:
16. Apple's Secret: 3 Zero-Days Fixed, Patch Now:

Hosted on Acast. See acast.com/privacy for more information.

In this episode of Commzgear Podcast, we covered various topics related to technology and cybersecurity. We started by discussing how Juniper Networks is powering superior experiences for patients and staff at Rady Children's Hospital and Sentara Healthcare, using their AI-driven wired and wireless access solutions. We then talked about Halfords delivering consistent and convenient shopping experiences using Juniper Networks' technology.

Moving on, we discussed Apple's new journaling app and the iOS 17 side-loading feature that will be exclusive to the US market. We also covered Rivian's new partnership with Apple Watch and the ability to control Apple Music from the car's dashboard.

We then talked about the latest Zoom update for iPhone, which includes dynamic island support, and T-Mobile launching Phone Freedom. Next, we discussed Google's new messages organization categories feature and the ability to co-present slides in Google Meet. We also covered rumors about the Samsung Galaxy Watch 6 featuring Exynos processors and the new Google Bard code.

We then talked about the latest security threats, including the Evil Extractor all-in-one stealer, the use of offensive defense against ransomware attacks, and how a telecom carrier enhanced security control of their remote workforce. We also discussed Sophos' cybersecurity guide for securing the manufacturing sector and their discovery of new Qakbot C2 servers and AuKill EDR killer malware. Lastly, we talked about the FBI and FCC's warning about juice jacking and the effectiveness of their advice.

Hosted on Acast. See acast.com/privacy for more information.

Articles in this podcast:

Mirror.co - Google bans 36 popular Android apps, now millions urged to delete them immediately

FastCompany.com - Will you lose your job to AI and tech like ChatGPT?

Inc.com - Warren Buffett Just Explained in 1 Sentence Why Apple Is the Most Successful Company In the World

Bloomberg.com - Apple Plans to Launch More Than Just Its New Headset at WWDC

AndroidAuthority.com - What is Google LaMDA? Here's what you need to know

Techradar.com - You need to sync your iPhone photos with Google and not just Apple Photos

TomsGuide.com - I bought fake Apple products on the Temu app — and it was a disaster

BGR.com - This new ChatGPT iPhone shortcut is a game-changer

AndroidAuthority.com - The Galaxy S23 Ultra + Samsung Dex = The ultimate gaming machine

9to5Google.com - Report: AI is coming soon to Google Search with ‘Magi’ as Samsung considers Bing default

AndroidPolice.com - Upcoming wave of Google AI chatbots supposedly meant to appease Samsung

AndroidCentral - The Galaxy S24 Ultra could ditch one of its cameras for something better

Pocket-lint.com - Samsung has a software update for your dire battery life and you won't guess what caused it

AndroidCentral.com - Poll: Which version of Android is your phone currently on?

CNET.com - Asus ROG Phone 7 Ultimate Review: This Gaming Phone Has a Hidden Door

Wired - The Hacking of ChatGPT Is Just Getting Started

CoinDesk.com - UN Cybercrime Treaty Could Lead to Sweeping Surveillance of Crypto Worldwide

TheStatesman.com - New malware in Discord can steal users’ info, warn researchers

Forbes.com - Three Cybercrime Predictions In The Age Of ChatGPT

Hosted on Acast. See acast.com/privacy for more information.

Podcast notes summarizing episode 8 related to various articles:

1. Cisco announces its intent to acquire Cloud Security Software Company - Cisco's recent acquisition announcement, what it means for the company, and its potential impact on the cybersecurity industry.
2. Juniper Networks and citizenM collaborate to deliver memorable hotel experiences with personalized engagement - Juniper Networks' collaboration with citizenM to enhance guest experiences through personalized engagement and the use of technology.
3. Discover Your Perfect Console with the New UniFi OS Resource Calculator - The new UniFi OS Resource Calculator, which helps users determine the perfect console for their needs.
4. Apple Stops Signing iOS 16.3.1 Following the Release of iOS 16.4 and iOS 16.4.1 - The recent update to iOS and the importance of updating to the latest version to ensure security.
5. Turn Off iPhone Wi-Fi Auto-Join Public Networks - The importance of turning off auto-join for public Wi-Fi networks on iPhones to ensure users' security.
6. Locate Android Phone Powered Off - A new feature from Android that allows users to locate their phone even when it's powered off.
7. Samsung Galaxy April 2023 Update - The latest Samsung Galaxy update and what it means for users.
8. Xiaomi 13 Ultra Launch - The new Xiaomi 13 Ultra and its features.
9. Financial Services Cybersecurity & Digital Transformation - Cybersecurity for the financial services industry and the need for digital transformation in the industry.
10. Accelerate: Doubling Down on Convergence and Consolidation - The recent Accelerate report from Fortinet and what it means for the industry, including the importance of convergence and consolidation in cybersecurity.
11. Cybersecurity Guide: Securing the Retail Sector - A cybersecurity guide for securing the retail sector, including the importance of cybersecurity for retailers, recommendations and best practices, and what's next for the retail sector and cybersecurity.
12. Apple Issues Emergency Patches for Spyware-Style 0-Day Exploits - The recent emergency patches issued by Apple to address spyware-style 0-day exploits and what Apple users can do to protect themselves.
13. Researchers Claim They Can Bypass Wi-Fi Encryption, Briefly at Least - A recent report claiming that Wi-Fi encryption can be bypassed briefly and what users can do to ensure their Wi-Fi network is secure.

RSA 2023: What Stronger Together Means with SonicWall - SonicWall's recent participation in the RSA 2023 conference and what "Stronger Together" means for the company and its customers. 

Hosted on Acast. See acast.com/privacy for more information.

1. ChatGPT, the popular language model, has been blocked in Italy due to concerns over its potential misuse.
2. The rumored solid-state buttons in the upcoming iPhone 15 Pro could offer a lot more functionality than traditional physical buttons.
3. Cisco discusses the next horizon in hybrid work and how organizations can prepare for the future of work.
4. Netgear introduces the first Wi-Fi 7 router, unlocking the next generation of high-performance connections.
5. WatchOS 10 will bring new features, according to Mark Gurman.
6. Apple users report issues with the weather app not working properly on their devices.
7. iOS 17 and iPadOS 17 may include a new feature according to a recent poll.
8. GM vehicles will support CarPlay in the future, according to a recent announcement.
9. Google Search on desktop now includes a filter for recently viewed pages.
10. Rumors suggest that the Galaxy S23 FE may be powered by an Exynos chipset.
11. Android's Nearby Share now works with Windows devices.
12. Google announces Tensor, a new chip that will power upcoming Pixel devices.
13. Fortinet discusses the benefits of a single-vendor SASE solution for securing a hybrid workforce.
14. The 3CX desktop app has been compromised, according to Fortinet.
15. Moobot targets Cacti and Realtek vulnerabilities in a new attack.
16. Fortinet provides intel on Wiper malware and how it can be prevented.
17. Barracuda warns of repeat ransomware attacks and offers tips for prevention.
18. Police use fake DDoS services to take aim at wannabe cybercriminals, according to Naked Security.
19. SonicWall discusses cybersecurity and the importance of preventing disaster from being online.

Hosted on Acast. See acast.com/privacy for more information.

• More foldable phones are coming later this year, but where is Apple in all of this? (Tom's Guide)
• There are hidden gestures in iOS that can save you time and make your life easier. (Tom's Guide)
• The latest version of iOS includes new privacy settings and camera features, among other things. (Digital Trends)
• Apple's VR headset might be a flop, according to an article from TechRadar. (TechRadar)
• ChatGPT is breaking into the entertainment industry and has generated its first five movies. (Cult of Mac)
• ChatGPT is available on the Apple Watch and can help you with a variety of tasks. (iMore)
• AI voice assistants may soon be replaced by more advanced AI systems, according to an article from SlashGear. (SlashGear)
• The upcoming Snapdragon 8 Gen 3 processor might be 64-bit only. (Android Central)
• A hacker has demonstrated security flaws in GPT-4 just one day after its launch, according to an article from VentureBeat. (VentureBeat)
• Hackers are stealing Gmail messages using a malicious extension, according to an article from Tom's Guide. (Tom's Guide)
• You can easily convert handwritten lists into interactive digital checklists using Google Keep Notes, according to an article from Gadget Hacks. (Gadget Hacks)
• TikTok is facing accusations of censorship and concerns over data privacy, as discussed in articles from Platformer News, Vox, and Slate. (Platformer News, Vox, Slate)
• GitHub Copilot is a new AI-powered code completion tool that promises to make coding faster and easier. (GitHub)
• A cybercrime syndicate has been dismantled after allegedly laundering over $1 million, according to an article from 9News. (9News)

Hosted on Acast. See acast.com/privacy for more information.

Key topics discussed in this episode of the Commzgear Podcast:

• Apple is improving Siri's language capabilities and working on a new AI system similar to GPT-3.
• The upcoming iPhone 15 Pro, Pro Max, and Ultra models could have significant price hikes.
• Samsung is releasing the Galaxy A54 5G smartphone.
• Google is working on the Pixel 7a prototype and has announced a generative AI policy.
• TechRadar reports that Google is developing a foldable phone that could make foldables more affordable.
• Google recently warned Samsung and Pixel phone owners about 18 dire exploits that could compromise their devices.
• T-Mobile is acquiring Mint Mobile to expand its customer base and offer more affordable mobile plans.
• Microsoft Outlook users are being warned about a critical new email exploit that triggers automatically.
• The healthcare industry faces significant cybersecurity challenges with the rise of telemedicine and digital technologies.

Hosted on Acast. See acast.com/privacy for more information.

Hosted on Acast. See acast.com/privacy for more information.