Cybersecurity Experts REACT to the php chaos... (and MORE)

Welcome to The Low Down, the best show on the internet for hackers

Listen on Spotify!
https://go.lowdownpod.com/spotify

The Low Down is presented by Maze.
LinkedIn: https://www.linkedin.com/company/mazehq/
X: https://twitter.com/Maze_Security

----------------

Today we're talking about:

PHP2Shell and the Disclosure Fight
Ed and Matt are at OneCon in Las Vegas as PHP2Shell sets off a chaotic week. We unpack the research, shaky AI exploit claims, Chainguard's early fixes and whether disclosure timelines can keep up. Dan Lorenc and the PHP Foundation give different accounts of the rollout.
https://calif.io/php2shell/
https://www.linkedin.com/posts/danlorenc_i-wanted-to-share-what-happened-with-the-share-7518756991520120832-QX2_/
https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/
Kyle Polley's embargo discussion: https://x.com/kpolley/status/2113069186318577666

Your Certificate Authority's Private Key Was 4
One of eMudhra's private keys was literally four. We talk tiny keys, certificate trust, the company's exit from SSL/TLS and what happens when clients still trust compromised certificates.
https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/
https://emudhra.we-have-a-problem.com/
https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business
https://www.mitmproxy.org/posts/releases/mitmproxy-12.3/

Linux Bugs and the Power of a Pattern
DirtyFrag, research credit and the latest kernel discussion lead into why Ed thinks AI is useful for spotting use-after-free patterns.
DirtyFrag research: https://github.com/V4bel/dirtyfrag
KSMBD background: https://docs.kernel.org/filesystems/smb/ksmbd.html

Does AI Favor Attackers or Defenders?
SentinelLABS' Tom Hegel makes the case for keeping powerful tools accessible to defenders. SentinelOne's Steve Stone explains why finding more bugs isn't the whole story: attack paths, speed, scale and the physics of an intrusion still matter.

Meet the Threat Hunting World Champion
Jason Walker joins us straight from his OneCon win. We get into his move from graphic design to security, CTF strategy, AI-assisted detection engineering and why the fundamentals still matter.
OneCon: https://www.onecon.io/

----------------

Follow Us!
https://www.instagram.com/lowdown.pod

Ed / Low Level
Instagram: https://www.instagram.com/lowleveltv/
LinkedIn: https://www.linkedin.com/in/lowleveltv/
YouTube: https://www.youtube.com/@LowLevelTV

Matt Johansen / Vulnerable U
Instagram: https://www.instagram.com/mattjayy/
LinkedIn: https://www.linkedin.com/in/matthewjohansen/
YouTube: https://www.youtube.com/@VulnerableU

Tom Hegel / SentinelLABS
LinkedIn: https://www.linkedin.com/in/tom-hegel/

Steve Stone / SentinelOne
LinkedIn: https://www.linkedin.com/in/stevenstone618/

Jason Walker / tresscross
LinkedIn: https://www.linkedin.com/in/jasonwalker777/
Blog: https://tresscross.blog/