Sponsored by
A CRM so smart, it updates itself.
HubSpot's CRM is so smart, it now updates itself. Calls get logged and summarized the moment they end. New leads get researched and a first outreach drafted, automatically. Deals move forward on their own, with next steps flagged before you have to ask.
Even the one repetitive task you've been meaning to fix can now run itself, no code required. Customers using it are already seeing the difference.
This isn't the CRM you have to work hard to figure out. It's the one already working before you log in.
Alternate subject: PHP2Shell goes live, Windows distrusts a CA, Virtualine seized (delete this line before sending)
Today's theme: trust is the attack surface. A web shell bug is landing on management interfaces, Microsoft just yanked trust in a certificate authority, and a third-party tip platform leaked a quarter century of "anonymous" data. Here is what actually matters.
CISA says PHP2Shell is being exploited, and your management interfaces are the target
CISA added the PHP2Shell flaws (CVE-2026-109618 and CVE-2026-109619) to its KEV catalog on October 26 after researchers saw working shells land on honeypots. Palo Alto's Unit 42 lists PAN-OS, Panorama and WildFire WF-500 as affected, with the risk sitting in the management web interface. Reporting is messy: Palo Alto says it has not seen malicious exploitation against its own products, while others report broad exploitation, and Unit 42 retracted an earlier claim tying PHP2Shell to a European government attack. Why it matters: if you manage firewalls for clients, check that management interfaces are not internet-facing, then patch. Federal agencies had until today.
Microsoft pushes out-of-band updates to distrust eMudhra certificates
After compromised eMudhra certificate authority keys came to light, Microsoft released updates on October 26 that remove seven related certificates from the Windows trust list, and has blocked the compromised intermediates since October 20. Machines that get automatic trust list updates need no action. The target is disconnected or locked-down systems. Why it matters: air-gapped and tightly controlled client environments will not fix themselves, and anything chained to those certificates needs replacing. Microsoft is still evaluating the remaining eMudhra roots, so expect a sequel.
Crime Stoppers vendor breach exposes years of "anonymous" tips
Navigate360 acknowledged on October 23 a breach of its P3 Global Intel tip platform, which reportedly exposed data from more than 1.5 million tips to Canadian Crime Stoppers programs over 25 years, per CBC's reporting. Reports say the platform was hacked back in March, several chapters have suspended intake, and Canada's privacy commissioner has opened a probe. Exact counts of tips containing personal data vary by source. Why it matters: it is a clean case study in third-party risk. Your client's promise of anonymity is only as good as their vendor's security, and a seven month gap between intrusion and disclosure is a hard conversation to have with a customer.
FBI seizes the domain of bulletproof host Virtualine
The FBI Washington Field Office, with international and private sector partners including Chainalysis, seized virtualine.net, the primary domain of an offshore bulletproof hosting provider that also operated under other brand names. Chainalysis says on-chain analysis tied its crypto addresses to ransomware strains, infostealers and scam infrastructure, and prosecutors allege it hosted a criminal forum. Why it matters: bulletproof hosts are the plumbing of ransomware and phishing. Expect a short-lived dip in infrastructure, then migration, so refresh your blocklists and threat feeds.
MSPs are putting AI agents to work well beyond the help desk
ChannelE2E reports solution providers are deploying AI agents into HR, finance, sales and project management, not just IT. The open questions are the ones that decide margins: how to measure agent performance, and how to price on consumption or outcomes instead of seats. Why it matters: if your clients are asking what you do with agents, "we're exploring it" is running out of runway. Pick a pricing model before the customer picks one for you.
That's the bytes for today. Patch the management plane, trust nobody's certificates, and keep an eye on your vendors' vendors. See you tomorrow.
The ChannelBytes team
