Two very different kinds of door were left open this week. One is the software underneath a huge share of the web, where a newly disclosed flaw sent website owners scrambling to patch. The other is the login screen at your bank, where AI assistants are quietly walking in alongside the people they work for. Add a Canadian grocery rewards breach that keeps growing and a backup tool that let attackers into 173 Microsoft 365 accounts, and it is a week for checking who has the keys. Let's get into it.
🗞️ STORY OF THE WEEK
PHP2Shell: A Flaw Underneath Millions of Websites Needs Fixing Now
This week, the group behind PHP, the programming language that powers a large part of the web, released emergency fixes for two critical flaws nicknamed PHP2Shell. PHP quietly runs behind WordPress, Drupal, Joomla, Magento and many other tools small businesses use for their websites and online stores, even if the owner has never heard of it. The flaws could let an attacker run their own commands on a website's server without logging in.
Reports of real attacks surfaced quickly. Cloudflare's chief technology officer said early attacks were emerging, and security firms reported exploitation attempts, though the PHP project said it had seen no evidence of working public exploits and the full extent is still unclear. Some details leaked a day before the planned fix date, which pushed the patches out early. Many websites were temporarily taken offline this week while their owners applied the update, so if a site you use showed a maintenance page, that is probably why.
What could go wrong for a small business is concrete: stolen customer or order data, a defaced site, a hidden back door, or your trusted website being used to send visitors to scams or malware. The part that catches people out is that updating WordPress or its plugins does not update PHP. That sits underneath, and it is usually managed by your hosting provider or whoever runs your server. PHP 8.1 and older no longer receive routine security updates at all, so abandoned or unsupported sites are the ones most likely to stay exposed.
Why It Matters
If your website takes orders, bookings or customer details, it can become a privacy incident under PIPEDA if data is stolen, and a reputation problem if your site is used to attack your own customers. Do you know who is responsible for updating the PHP your site runs on?
What You Can Do
Email your web host or IT provider today and ask them to confirm in writing that the PHP2Shell fix is installed on every website you own, not just scheduled. If any site runs an old or unsupported version of PHP, or nobody maintains it anymore, ask whether it should be upgraded or taken offline.
⚡THE RIPPLE EFFECT - Three stories, and what they actually mean for your business
Banks Are Finding AI Agents Inside Customer Accounts
According to Axios, major US banks including JPMorgan, Bank of America, Wells Fargo, Citi and Morgan Stanley are detecting unauthorized third party AI agents operating inside customer accounts. In many cases, a customer handed an AI assistant their login, which most banks forbid. Banks say they struggle to tell a customer-directed agent from a rogue one, and some have seen agents contacting call centres or acting beyond what the customer asked. Several banks are restricting agent access, and most are moving toward read-only access. Morgan Stanley told Axios it has not observed rogue agents on its platforms.
What it means for you: This is a US report, but the lesson travels: banks generally require you to log in yourself. Do not give any AI tool your banking password, and ask your own financial institution what its rules say about AI assistants before you or your staff try it.
A Rewards Program Breach Grows for Save-On-Foods and Sister Grocery Stores
More Rewards, the loyalty program used by Save-On-Foods, Buy-Low Foods, PriceSmart Foods and Nesters, disclosed that customer information was accessed in a cybersecurity breach. Since the first announcement, the company has said more customer data was involved than it first reported. Details on the number of people and the types of data were still limited at the time of writing.
What it means for you: If you run a loyalty program, mailing list or customer account system, you are responsible for that data under PIPEDA even if a vendor holds it. Ask what you collect, how long you keep it, and who you would call to report a breach.
A Backup Tool Became the Way Into 173 Microsoft 365 Accounts
Attackers used a compromised Microsoft 365 connection tied to ConnectWise's cloud backup service to sign into 173 partner and customer accounts, going around the individual users' multi factor authentication. ConnectWise disabled seven of the app connections involved and suspended the service while it investigates.
What it means for you: Multi factor authentication protects people, not the software connected to your accounts. Ask your IT provider to review which third party apps and backup tools have permission to access your Microsoft 365, and remove any you do not recognize.
600+
The US cyber agency CISA, the FBI and partner agencies warned this week that the SafePay ransomware group has breached more than 600 critical infrastructure organizations since August 2024. The group steals data, encrypts systems and deliberately destroys backups. Its ways in are ordinary: exposed passwords, guessed logins and flaws in remote access VPNs.
✅ ONE THING TO DO THIS WEEK
Decide Which Accounts Your AI Tools Are Never Allowed to Touch
The bank story is really about a decision many businesses are making by accident: an employee, or an owner, hands an AI assistant a login so it can get something done. It feels efficient. But a login is a master key, and the AI acts with every permission you have, including moving money or placing orders.
Write a short rule this week and share it with your team. Name the accounts AI tools may never be given a password to, such as banking, payroll, payment processors and the admin login for your website. For anything else, use a tool's built-in connection with limited, read-only permissions where one exists, and keep a person in the loop for any action involving money. One page is enough.
A login is a master key. Don't hand it to a tool you can't supervise.
📌 QUICK BITES
The Canadian Cyber Centre issued an alert on a critical BeyondTrust remote support flaw that attackers have been using. Self-hosted copies need the latest patch, while the cloud version was fixed earlier this month. If you or your IT provider use this remote support tool, confirm the fix is installed.
The Burnaby School District says student and parent data may have been exposed in its recent cyberattack. Names, contact details, birthdates and grades may be involved. If you hold information about children or families, keep only what you need and have a plan for telling affected people quickly.
The US Federal Trade Commission has reportedly subpoenaed OpenAI and Anthropic as part of an investigation into consumer harm from AI. It is a sign regulators are moving from guidance to enforcement. Expect vendors to face tougher questions, and be ready to answer what your staff paste into AI tools.
Canada and the United Kingdom renewed their partnership on AI security. The Canadian AI Safety Institute and the UK AI Security Institute will keep working together, which suggests Canadian expectations for responsible AI will follow allied standards.
Illinois created an AI Cabinet to develop state AI policy. With no US federal rules, state level obligations are multiplying. If you sell into the US, keep a simple list of the AI tools you use.
💬 PARTING THOUGHT
Both of this week's biggest stories come down to the same unglamorous question: who has the keys, and does anyone know where they have gone?
Your website's PHP quietly managed by someone you may never have met. An AI assistant that logged into a bank account because it was convenient. A backup tool with permission to open 173 mailboxes. None of these were break-ins in the movie sense. Each was something trusted that nobody was watching closely.
Resilience is not about trusting less. It is about knowing exactly what you have trusted, and who to call when it matters.
See you next Friday and stay
TryberResilient