Awareness Month Became Patch Month: PHP2Shell, Stolen AI Keys, and a Broken CA
Show notes
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss the critical cybersecurity incidents that emerged during Cybersecurity Awareness Month. They delve into the PHP vulnerabilities that were leaked, the Railway incident involving AI API keys, the Light LLM attack with poisoned releases, and the breach of the E Mudara certificate authority. The conversation emphasizes the importance of responsible vulnerability disclosure, the challenges faced by cybersecurity teams, and the need for continuous improvement in security practices.
----------------------------------------------------
YouTube Video Link: https://youtu.be/M_5pnEqUC14
----------------------------------------------------
Documentation:
https://www.php.net/archive/2026.php#2026-10-23-1
https://www.wiz.io/blog/litellm-compromised-steals-credentials
https://blog.railway.com/p/preliminary-report-october-security-incident
https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]