PHP2Shell: A Leaked Demo, A Broken Disclosure, and AI at Exploit Speed
From Initial Access · 00:52:40
Show by Bishop Fox
In this episode, we break down one security story: PHP2Shell: two critical PHP RCE flaws reaching back to PHP 5.4 How a leaked demo video broke PHP's coordinated disclosure Why AI turns every public detail into an exploit shortcut What defenders should patch, check, and monitor right now We also cover Bishop Fox research on the true blast radius of an AI attack, and how far a manipulated agent can reach when it acts inside enterprise systems. Security Headlines: PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge, The Hacker News php2shell: A tale of two PHP remote vulnerabilities, Calif Frequently Asked Questions About PHP Remote Code Execution (PHP2Shell CVE-2026-109618 & CVE-2026-109619), watchTowr Also mentioned: Workshop: iOS Game Hacking: From Zero to God Mode Virtual Session: Healthcare Security at Machine Speed: $17M Ransomware & AI Adversaries Blog: The True Blast Radius of an AI Attack Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.
More episodes of Initial Access
More episodes
- Nvidia CEO Investigation, N-central Zero-Days, SonicWall MFA Bypass, And A Chainalysis Breach
- Binance $6.36B Hack, VMware ESX Zero-Day, TeamViewer Flaw, And Anthropic AI Exploits
- Direct Access with Farzan Karimi
- PHP2Shell Exploitation, Node2Shell Brotli RCE, And Mimori Ransomware Claims
- OpenAI Insider, Meta Muse’s Escape Hatch, AI Agents Gone Rogue
- A Third NetScaler Zero-Day, 8 Million Danish ID Records, and Google Pauses Its Bug Bounty
- ShinyHunters PeopleSoft WAF Bypass, Arrests, And OpenAI Astra News
- Zero-Click Exchange RCE, $25 AI Intrusions, and the ShinyHunters FBI Claim
- Ten-Hour Breaches, MikroTik Backdoors, Router Takeovers & the NetScaler Root Cause
- Patch Tuesday Overload, Broken Threat Feeds & the Scoping Problem
PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.