PHP2Hell - Joshua Wright - PSW #949

Special guest Joshua Wright joins us for a timely incident-response discussion!

Then, in the security news this week:

• Have you heard about PHP2Shell?
• Certificates with keys small enough to guess
• Tor exit nodes turn into SSH credential traps
• Do USB-C cables need firmware updates now?
• HaleHound packs a radio lab into a cheap display
• Claude solves part of the NIST curve mystery
• The Army and self-directed offensive cyber agents
• Retired nuclear reactors return to power AI
• PatchSlop
• NGINX, NODE.js patches critical flaws
• BeyondTrust exploited before the patch landed
• Plex vulnerabilities move from PoC to exploitation
• ICS patches, including a Siemens flaw exploited in the wild
• Can fake data trigger Japan's emergency alert?
• Agentic pentests?
• AI may add noise more than skill
• AI agents navigate OT and move equipment
• AI model helps build a Chrome exploit
• Utah's VPN law runs into technical reality

Segment Resources:

https://dynamicincidentresponse.com/ - A New Era for Incident Response!

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-949