Bitsight

A POST request returns a 500 error, PHP reports memory exhaustion and heap corruption, and the Apache worker crashes.

Cybersecurity firm BitSight counts nearly 37 million internet-facing systems running PHP.

That's up from earlier accounts that we had that put it in the 5 million range.

And a reminder, a web application firewall or patching popular software like WordPress or Drupal doesn't close this hole.

And then in September, Gambit described a spree that breached 25 companies and stole at least 600,000 credit card records.

Meanwhile, the firm BitSight says chatter about autonomous agents on criminal forums has surged.

So we have a pattern, not an anecdote.

Let me ask the practical question, Jessica.

He led Veracode through a $614 million acquisition by CI Technologies, and before that, grew a SaaS business that he ran to the point where Iron Mountain just had to buy it.

From Cisco to the boardroom of BitSight and Fairwinds, Bob has spent decades at the intersection of cybersecurity, cloud, and transformation, and he has the scar tissue to prove it.

Psychology grad who became a technology leader and now one

of the most sought-after executive coaches and board directors in the game, Bob, welcome to the show.

So the victims whose keys leaked pick up the bill.

That listing anchors new research from BitSight, which tracked posts across 16 criminal forums from February through August.

Mentions of AI agents prompt injection, and the model context protocol rose 67%.

And interest in open-weight models climbed because they run beyond provider monitoring.

Ransomware chatter fell by nearly half over the same stretch.

BitSight also points to a campaign that seeded roughly 7,600 fake GitHub repositories with malware, more than 800 of them posing as AI skills or MCP servers.

Its advice? Treat a leaked AI key as seriously as a leaked cloud credential, and verify every agent plugin before installing it.

Android 15 is the line that matters for one of Google's new scam defenses.

He led Verico through a $614 million acquisition by CI Technologies, and before that, grew a SaaS business that he ran to the point where Iron Mountain just had to buy it.

From Cisco to the boardroom of BitSight and Fairwinds, Bob has spent decades at the intersection of cybersecurity, cloud, and transformation, and he has the scar tissue to prove it.

Psychology grad who became a technology leader and now one

of the most sought-after executive coaches and board directors in the game, Bob, welcome to the show.

Even the headline count is contested.

BitSight reported more than 73,000 firewalls and reporting on the Hudson Rock data described 73,932 URLs against SOC Radar's 86,644.

The sensible reading isn't an exact number, it's that a very large credential set exists and several credible sources agree it matters.

And this is still live?

Uh, this is, uh, I think story number 12 if you're looking, uh, here, and there's, uh, there's some big accusations there.

Uh, I, I didn't, I didn't throw a lot of details in, in there, but this, this whole market, um, uh, Security Scorecard, uh, sued, uh, Safe Security, and BitSight, uh, sued them.

Uh, there's a lot of finger-pointing about, like theft of IP and stuff like that.

I don't know.