Governed Today

PHP2Shell and a Linux kernel flaw took attackers from 25 firewalls into Active Directory.

• PHP2Shell plus Fragnesia (CVE-2026-46300) rooted 25 firewall servers, then hit Active Directory; PHP2Shell KEV due today, Fragnesia due 31 Oct.
• MC1465763: SMS first-factor sign-in disabled in low-use tenants; MC1529463: MemberOf retires 3 Nov.
• Entra Agent ID inactivity policy disables idle agents at 90 days.
• MC1529472: Frontier previews expand to Teams, new Outlook, OneDrive and SharePoint.
• Orange Tsai's Edge logic-bug chain, Skyw4lker device code phishing and Volt Typhoon's Silent Train.

This episode is AI-voiced (NotebookLM) from Ted Johansson's curated daily M365 and cyber governance digest.