Don't Get Hacked: New AI Threats & Emergency Patches You Can't Ignore

Ukraine's CERT-UA warns attackers are remotely hijacking Dahua cameras through the Easy4IP cloud feature using device serial numbers, and Sansec reports 953 Magento stores hit by a long-running skimmer campaign rated 9.1. Microsoft and Cloudflare shipped emergency patches for a 9.2 Brotli decoder flaw, and PHP patched 9.8 remote code execution bugs reaching back to version 5.4. Plus CISA adds a 9.3 cPanel authentication bypass to its KEV catalog, and the FBI arrests a third ShinyHunters member as the group turns to AI to automate attacks.

The hot sheet: https://blog.thehotdrop.live/blog/the-hot-drop-for-10-27-2026

0:00 Dahua Cameras Hijacked via Easy4IP
2:12 953 Magento Stores Skimmed
4:07 Brotli Decoder Flaw: Emergency Patches
6:05 PHP Patches 9.8 RCE Flaws
6:42 cPanel Auth Bypass Hits CISA KEV
7:38 ShinyHunters Turn to AI

#Cybersecurity #Magento #PHP #cPanel #ShinyHunters