By default, any M365 user can approve a shady app with one click, and that access can outlast a password reset. Worth knowing about, along with MFA fatigue and device code phishing: hubs.li/Q04yV34d0

Shadow AI is the blind spot nobody’s watching. 👀

Field Effect's AI Detection & Response offers visibility & control of AI tools, built right into Field Effect MDR at no extra cost.

Endpoint. Identity. Network. AI. One platform and 24/7 SOC.

Details: fieldeffect.com/products/mdr/a…

Security settings drift. Someone loosens a policy, a new app gets access, and nobody circles back. Cloud Tenant Risk Score watches your M365 tenant, ranks the gaps, and tells you how to fix them. Included with Field Effect MDR. hubs.li/Q04yV1KV0

🚨 PHP released emergency patches for two critical RCE flaws (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2). Exploitable with no login, and updating your CMS won’t fix it.

Patch PHP itself: 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35

Details: fieldeffect.com/blog/php-updat…

@fieldeffectsoft Thankful for everything you do. For giving MSPs like myself one of the most amazing EDR solutions that exist!

Most breaches start with something boring, like an MFA policy with gaps or a legacy sign-in nobody turned off. Cloud Tenant Risk Score in Field Effect MDR helps you spot those in your M365 tenant before an attacker does. hubs.li/Q04yV1pd0

And last but not least, join us for a reception at the Met in Ottawa on Oct 28!

Catch a fireside chat with @lucyhargreaves4 and @notnotaspy of @fieldeffectsoft, followed by an evening of networking.

Register: luma.com/metreception 🎟️

Cybersecurity vendor Field Effect growing fast with new tool targeting ‘shadow AI’ at companies www.​theglobeandmail.​com/business/article-cybersecurity-vendor-field-effect-growing-fast-with-new-tool-targeting/

A recently disclosed Apache Tomcat vulnerability, CVE-2026-34486, exposes clustered deployments to remote code execution under specific conditions.

Public proof-of-concept exploit code demonstrates practical exploitation through the Tomcat Tribes communication channel, increasing risk where clustering is enabled and network exposure exists.

Applying vendor patches and reviewing clustering configurations reduces exposure and removes the underlying vulnerability. More: fieldeffect.com/blog/public-ex…

More than 80% of incidents our team investigated last year stemmed from cloud identity compromise, highlighting a growing shift in how adversaries are gaining access to corporate environments. Get more cybersecurity data, trends, and analysis here: get.fieldeffect.com/2026-cyber-thr…

Escalating conflict following coordinated U.S. and Israeli strikes on Iranian military and nuclear sites has raised concerns about potential cyber spillover.

Researchers have observed a rise in opportunistic hacktivist activity and unverified claims of DDoS attacks, defacements, and data leaks targeting Iran’s adversaries.

Organizations are advised to remain vigilant and reinforce core security controls. More detail here: fieldeffect.com/blog/cyber-spi…

🚨 AWS reports groups are actively exploiting the #React2Shell RCE in the wild. Attackers are using exposed RSC endpoints for unauthenticated RCE → webshells → cloud pivoting. Patch React/Next.js immediately. No Field Effect systems are affected.

More: fieldeffect.com/blog/react-ser…

Researchers found the Recent Links feature on online code-formatters leaks private snippets via predictable URLs, exposing API keys, DB creds, & tokens at scale. More details here: fieldeffect.com/blog/recent-li…

From our security experts 👇

A high-severity RCE vulnerability (CVE-2025-62518) impacts Rust-based archive libraries like async-tar, used across cloud-native & containerized systems.

Multiple patches avail, check our writeup for full mitigation details: fieldeffect.com/blog/tarmagedd…

An exec-targeted extortion campaign is claiming theft of Oracle EBS data. Since then, a critical flaw in Oracle EBS (CVE-2025-61882) has been confirmed.

If you run #Oracle #EBS (v12.2.3-12.2.14) or have internet-exposed modules:

- Patch immediately
- Lock down/reset access paths
- Hunt for IoCs (reverse shells, HTTP anomalies, unusual outbound activity)

Full breakdown: fieldeffect.com/blog/oracle-eb…