Thursday’s brief: Fortinet’s firewall fixes land today, then Cisco Expressway, eMudhra certificates and PHP2Shell

By George Bailey   Published: 10/22/26   2 min read
Cyber News

Good morning. Fortinet ships critical fixes for FortiOS, FortiManager and FortiAnalyzer today and will not say what they fix until November 10, so firewall teams have a busy Thursday. Cisco patched a root-level Expressway flaw, a certificate authority’s broken keys mean your servers need a trust-store update, and the PHP2Shell patches we flagged yesterday are out with attack attempts already showing up.

Lead Story

Fortinet releases FortiOS 7.6.8, 7.4.13 and 7.2.14 today with critical fixes for FortiGate, FortiManager and FortiAnalyzer. Book the firewall window →

Also Worth Your Attention

Cisco fixed a 9.8 root-level flaw in clustered Expressway servers, plus Unified CM hardening. Upgrade path →

Eight eMudhra certificate keys could be recovered by anyone; browsers block them, your servers may not. Test your trust store →

PHP2Shell patches are out and attack attempts have started against PHP servers. Confirm the new version →

Also on the radar: CISA, the FBI and partners say the SafePay ransomware group has hit more than 600 critical infrastructure organisations since August 2024, often through exposed credentials and VPN access (BleepingComputer). CISA’s deadline for federal agencies on two of the exploited Plex2Shell flaws in Plex Media Server is Friday, October 23; version 1.43.3.10861 fixes them (BleepingComputer).

Source: Fortinet release note; Cisco Expressway advisory; eMudhra incident site; PHP advisory

Go Deeper

Get this in your inbox every weekday morning: subscribe to the Daily Brief.

George Bailey

George Bailey is the byline of the CyberExperts editorial desk, the team behind the CyberExperts Daily Brief. The desk covers vulnerabilities, breaches and security news from vendor advisories, CISA alerts and other primary sources, and links those sources in every story. Questions or corrections: [email protected].