PHP2Shell
17
MENTIONS
16
EPISODES
16
PODCASTS
Search complete. 17 mentions across 16 episodes found for "PHP2Shell".
Oct 24, 2026
Linus SebastianHOST
That's awesome.
Linus SebastianHOST
PHP2Shell clearly shows how AI and LLMs change the equation when evaluating weaknesses in code.
Linus SebastianHOST
The vulnerable code had been present for more than a decade, but turning those weaknesses into working exploits required chaining multiple bugs together, accounting for how PHP would allocate and reuse memory across requests over different versions of PHP on different platforms.
Linus SebastianHOST
A successful attack that works against one configuration would require significant adjustments to work on another, and attacks at scale would be difficult.
Max the BotHOST
It is a deliberately alarming title, and the core argument is that AI has changed the economics of cyber offense.
Max the BotHOST
Hazar points to PHP2Shell, a major vulnerability in PHP, important because PHP still runs a huge share of the web, alongside a critical Node.js flaw and reports of Chinese state-aligned actors using swarms of AI agents to break into accounts.
Max the BotHOST
The analogy is not that cyber is exactly like a pandemic.
Max the BotHOST
It is that old vulnerabilities were always present, but the transmission rate has changed.
Jason CalacanisHOST
is at risk.
Jason CalacanisHOST
In August, security researchers using AI found two, one, two critical exploits nicknamed PHP2Shell.
Jason CalacanisHOST
PHP security team gave this a severity rating of 9.2 out of 10, basically DEF CON 1 for these security teams.
Jason CalacanisHOST
Since August, developers and companies have been working together on fixes.
Dave BittnerHOST
It is great to have you with us.
Dave BittnerHOST
Attackers are ramping up attempts to exploit two critical PHP vulnerabilities known as PHP2Shell, but researchers have yet to confirm a successful compromise in the wild.
Dave BittnerHOST
The flaws allow unauthenticated remote code execution and prompted emergency patches on October 21st.
Dave BittnerHOST
Sophos identified attempts to deploy Potassium, a Mirai botnet variant, although the attack it examined was unsuccessful.
Mike SantoliHOST
For Alibaba, which is remarkable considering, you know, everything that's going on in tech since then.
Mike SantoliHOST
Well, cybersecurity stocks soaring today on continued worries about a new vulnerability called PHP2Shell discovered by AI.
Mike SantoliHOST
CrowdStrike CEO George Kurtz saying AI attacks are doubling every month.
Mike SantoliHOST
And he says this PHP issue won't be easy
Doug WhiteHOST
It's the Security Weekly News, and it's episode 627, and it's Friday, the 23rd day of October 2026, and I am Doug White.
Doug WhiteHOST
Today, we've got Tor, PHP2Shell, DeepFakes, Emudra, LightLLM, Meta, Josh Marpet, and more on this episode of the Security Weekly News.
Aaran LeylandHOST
We interrupt our program.
Doug WhiteHOST
It's the show that keeps you up to date on the latest security news twice a week.
Doug WhiteHOST
It's the Security Weekly News, and it's episode 627, and it's Friday, the 23rd day of October, 2026, and I am Doug White.
Doug WhiteHOST
Today, we've got Tor, PHP2Shell, DeepFakes, Emudra, LightLLM, Meta, Josh Marpet, and more on this episode of the Security Weekly News.
Aaron LelandHOST
We interrupt our program today.
Doug WhiteHOST
It's the show that keeps you up to date on the latest security news twice a week.
Doug WhiteHOST
It's the Security Weekly News, and it's episode 627, and it's Friday, the 23rd day of October 2026, and I am Doug White.
Doug WhiteHOST
Today, we've got Tor, PHP2Shell, DeepFakes, Emudra, LightLLM, Meta, Josh Marpet, and more on this episode of the Security Weekly News.
speaker_1UNKNOWN
We interrupt our program.
Doug WhiteHOST
It's the show that keeps you up to date on the latest security news twice a week.
ScafiHOST
It's called the PHP2 shell vulnerability.
ScafiHOST
So there's a girl shell, PHP2Shell.
speaker_4UNKNOWN
There's your name there in the
ScafiHOST
vulnerability.
Michael HouschHOST
PHP, which remains foundational to so many web applications, is under active attack as well.
Michael HouschHOST
Researchers have confirmed that exploitation of a major PHP vulnerability, dubbed PHP2Shell, actually started days before the official patches were released.
Michael HouschHOST
This is a classic example of attackers moving faster than defenders.
Michael HouschHOST
If you're running unpatched PHP systems, you're in the crosshairs.
6 more episodes mention PHP2Shell.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.