PHP2Hell - Joshua Wright - PSW #949
Shownotes
Special guest Joshua Wright joins us for a timely incident-response discussion!
Then, in the security news this week:
- Have you heard about PHP2Shell?
- Certificates with keys small enough to guess
- Tor exit nodes turn into SSH credential traps
- Do USB-C cables need firmware updates now?
- HaleHound packs a radio lab into a cheap display
- Claude solves part of the NIST curve mystery
- The Army and self-directed offensive cyber agents
- Retired nuclear reactors return to power AI
- PatchSlop
- NGINX, NODE.js patches critical flaws
- BeyondTrust exploited before the patch landed
- Plex vulnerabilities move from PoC to exploitation
- ICS patches, including a Siemens flaw exploited in the wild
- Can fake data trigger Japan's emergency alert?
- Agentic pentests?
- AI may add noise more than skill
- AI agents navigate OT and move equipment
- AI model helps build a Chrome exploit
- Utah's VPN law runs into technical reality
Segment Resources:
https://dynamicincidentresponse.com/ - A New Era for Incident Response!
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-949