A Padlock Key Was the Number 4 + AI Zombie Apps Want Your Photos + PHP Exploit Video Leaked Early

A joke vulnerability fooled half the internet because it sounded just like the real ones. The key protecting the padlock in your browser turned out to be the number four. Halloween apps want your family photos and won't say who they are. Fake IT support is flooding inboxes and then offering to fix them over Teams. And an unreleased AI model has been shown chaining bugs together into working attacks.

This week on Click Happens, episode 5, with guest Jono Zachariah, founder of Baseline 77, we cover the PHP2Shell and Node2Shell flaws and the HTML2Shell joke, the AI Halloween sites asking for your photos, the Teams external chat scam, the Warhorse Studios cyberattack, the eMudra certificate distrust and AI chaining flaws into working attacks. Jono also explains why a catchy name helps security teams get things patched.

00:00 Intro

01:32 Welcome and Meet Jono

03:40 PHP2Shell, Node2Shell and HTML2Shell

26:19 AI Halloween Sites

35:47 Teams External Chat Scam

46:00 Warhorse Studios Cyberattack

54:35 eMudra Certificate Distrust

1:03:21 AI Chaining Flaws Into Working Attacks

1:12:03 AI and Fixing Security Faster

Subscribe for weekly cybersecurity news made simple, so even your mum gets it.

Click Happens is an independent podcast hosted by Ant Davis, with a different guest joining each week.

Instagram: @antdaviscyber

TikTok: @antdaviscyber

LinkedIn: @antdaviscyber

YouTube: @antdaviscyber

Website: www.antdavis.com

Guest: Jono Zachariah, founder of Baseline 77, a disruptive cybersecurity consultancy

Jono on LinkedIn: https://www.linkedin.com/in/jonathonzachariah/

Baseline 77 on LinkedIn: https://www.linkedin.com/company/baseline77

Baseline 77 website: www.baseline77.com