Heartbleed
35
MENTIONS
24
EPISODES
22
PODCASTS
Search complete. 35 mentions across 24 episodes found for "Heartbleed".
Oct 22, 2026
Nathaniel WhittemoreHOST
Volker Dusch, a security engineer at the nonprofit that maintains PHP, said that this was the most severe security issue the programming language has faced in over a decade.
Nathaniel WhittemoreHOST
He compared it to Heartbleed, a critical vulnerability in the OpenSSL cryptographic library that led to a global patching effort back in 2014.
Nathaniel WhittemoreHOST
In a blog post discussing the vulnerability, OpenAI wrote, To our knowledge, Frontier AI found these vulnerabilities before attackers did, opening a defender's window for maintainers and security providers to prepare fixes and protections ahead of disclosure.
Nathaniel WhittemoreHOST
That's technically true and a bug fix was made available immediately.
Johannes UllrichHOST
Definitely, you know, take it a little bit as sort of an exercise, a dress rehearsal for what's coming next.
Johannes UllrichHOST
I think as we had with a lot of similar critical vulnerabilities in the past, whether it's Heartbleed or such inventory, that's always sort of one of the big weaknesses.
Johannes UllrichHOST
You just don't know what you're running and where you're running it and what version you're running.
Johannes UllrichHOST
That's really, you know, I think if you want to work ahead for the next similar vulnerability, that's always the part that you probably need to work at first to hopefully be ready for the next time a PHP or a similar big product has a vulnerability.
Kamran AyubHOST
That's the main news source I was looking at for this, the CA certificates thing.
Kamran AyubHOST
They were saying that like, this is almost bigger than Heartbleed because there's so many downstream systems that are going to need to update.
Kamran AyubHOST
This is going to take years for everything to get updated.
Kamran AyubHOST
Because think about your IoT devices.
speaker_0HOST
By Wednesday, the Dutch sites were coming back.
speaker_0HOST
Wiz says PHP2 shell could be a turning point, like Heartbleed and Log4 shell.
speaker_0HOST
The security researcher Kevin Beaumont expects a large number of incidents.
speaker_0HOST
The forensics expert Hal Pomerantz warns that many old servers will never be patched.
Chris Stokel-WalkerHOST
But it's absolutely massive.
Chris Stokel-WalkerHOST
So I did a story on Heartbleed, which was a similar sort of vulnerability with SSH, which was a different thing.
Chris Stokel-WalkerHOST
That's the kind of padlock security thing that you do when you buy online or whatever.
Chris Stokel-WalkerHOST
More than a decade ago now, that was a massive issue for the internet.
Dave BittnerHOST
Major browsers and several applications have already blocked the certificates, and there's currently no evidence they've been maliciously exploited, but cleaning up the broader Internet could take years.
Dave BittnerHOST
Cryptography expert Filippo Valsorda compares the challenge to the 2014 Heartbleed vulnerability, warning that this recovery could be even more complicated.
Dave BittnerHOST
Linux systems, embedded devices, forgotten servers, and IoT devices may require individual updates.
Dave BittnerHOST
The immediate concern involves attackers intercepting encrypted communications, particularly VPN connections.
Jordi HaysHOST
It is the most severe security issue that PHP has faced in more than a decade.
Jordi HaysHOST
According to Volker Dusch, a security engineer with a nonprofit foundation that manages the PHP project, he likened it to Heartbleed, a similarly widespread vulnerability that forced a global race to protect hundreds of thousands of servers more than a decade ago.
Jordi HaysHOST
When security patches are released, it marks the starting shot in a race between defenders and hackers.
Jordi HaysHOST
Defenders have to test and install the software patches while hackers study the patches as a guide to find new vulnerabilities, looking to see what has changed and then devising ways of attacking those areas.
Jordi HaysHOST
We need to figure out how to, we need a nickname for that.
Jordi HaysHOST
It's getting a little long.
TylerHOST
Heartbleed, that other.
TylerHOST
Yeah, that name goes hard.
Jordi HaysHOST
It is the most severe security issue that PHP has faced in more than a decade.
Jordi HaysHOST
According to Volker Dusch, a security engineer with a nonprofit foundation that manages the PHP project, He likened it to Heartbleed, a similarly widespread vulnerability that forced a global race to protect hundreds of thousands of servers more than a decade ago.
Jordi HaysHOST
When security patches are released, it marks the starting shot in a race between defenders and hackers.
Jordi HaysHOST
Defenders have to test and install the software patches while hackers study the patches as a guide to find new vulnerabilities, looking to see what has changed and then devising ways of attacking those areas.
Jordi HaysHOST
But PHP 2 Shell was viewed as a priority, and AI's proficiency We need to figure out how to – we need like a nickname for that.
Jordi HaysHOST
It's getting a little long.
TylerPANELIST
Heartbleed, that other – Yeah, that name goes hard.
TylerPANELIST
PHP2Shell doesn't sound very scary.
Philip TeresiHOST
Volker Deutsch is a security engineer with the nonprofit foundation that manages the PHP project.
Philip TeresiHOST
He compared it to Heartbleed.
Philip TeresiHOST
This was another widespread spread vulnerability that forced a global race to protect hundreds of thousands of servers a little over ten years ago.
Philip TeresiHOST
So the decision was made to build a working fix to patch the software.
14 more episodes mention Heartbleed.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.