Cover of PHP2Shell Causes Hell on a Friday 2026-10-26

PHP2Shell Causes Hell on a Friday 2026-10-26

PHP2Shell Causes Hell on a Friday 2026-10-26

Listen for free

View show details

Season's Savings | 0.99 €/month for 3 months

5.99 €/month thereafter - terms apply. Cancel monthly.
Summary
 The BHIS crew breaks down PHP2Shell, the challenges of emergency patching, and how AI-assisted vulnerability discovery is changing incident response. They discuss weak eMudhra certificate keys, Node2Shell and Brotli vulnerabilities, and security issues involving Plex, LiteLLM, GitLab, Broadcom Wi-Fi, and Popcorn Time. Other topics include AI agent frameworks used in attacks, research into self-propagating agents, context bombing as a defensive tactic, and the security and privacy implications of AI-assisted smart TV hacking.Join us LIVE on Mondays, 4:30pm ET.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — Ryan Fixes Audio(04:57) - PHP2Shell Causes Hell on a Friday 2026-10-26(07:12) - PHP2Shell: AI-discovered vulnerabilities and emergency patching(16:47) - Azure incident response workshop and Denver training(25:19) - Weak eMudhra certificate keys and certificate trust failures(31:08) - Doc Blackburn’s encryption fundamentals workshop — December 4(37:13) - Rapid-fire roundup: Plex, LiteLLM, and GitLab(38:37) - Storm-0940: AI agent frameworks and the ConnectWise compromise(40:23) - Research into self-propagating AI agents and botnets(42:34) - AI-assisted smart TV hacking and restrictions on security research(47:59) - Context bombing: Triggering AI guardrails to disrupt attacks(51:46) - John Strand’s Information Security Core Skills in the Era of AI — November 10–11(52:02) - December Antisyphon summit: What in the Actual Cyber(52:46) - Broadcom Wi-Fi flaw: WPS memory exposure and stolen passwords(54:15) - OpenAI agent incidents and containment challenges(56:54) - Popcorn Time updater and supply chain attack risksLinksPHP2Shell: AI-discovered vulnerabilities and emergency patchingAzure incident response workshop...and Denver trainingWeak eMudhra certificate keys and certificate trust failuresDoc Blackburn’s encryption fundamentals workshop — December 4Node2Shell: Brotli vulnerabilities and downstream patchingRapid-fire roundup: Plex, LiteLLM, and GitLabStorm-0940: AI agent frameworks and the ConnectWise compromiseResearch into self-propagating AI agents and botnetsPeople are vibe coding their way to better TVsContext bombing: Triggering AI guardrails to disrupt attacksJohn Strand’s Information Security Core Skills in the Era of AI — November 10–11December Antisyphon summit: What in the Actual CyberBroadcom Wi-Fi flaw: WPS memory exposure and stolen passwordsOpenAI agent incidents and containment challengesPopcorn Time updater and supply chain attack risksCreators & Guests Corey Ham - HostChed "cheddar" Wiggins - GuestRalph May - HostBronwen Aker - HostDoc Blackburn - GuestGerard Johansen - GuestRyan Poirier - ProducerClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
adbl_web_anon_alc_button_suppression_t1
No reviews yet