PHP2Shell and a Big CA Compromise

This week was a tale of two stories: the PHP2Shell vulnerabilities and the compromise of several certificates issued by CA eMudhra in India.
Timestamps00:00 (youtube.com/watch?v=SZVcFoxQqb0) — A wild week in security news02:50 (youtube.com/watch?v=SZVcFoxQqb0&t=170s) — PHP vulnerabilities and the disclosure drama08:07 (youtube.com/watch?v=SZVcFoxQqb0&t=487s&…) — Why coordinating an embargo is so difficult10:02 (youtube.com/watch?v=SZVcFoxQqb0&t=602s) — Preparing for the PHP patches11:29 (youtube.com/watch?v=SZVcFoxQqb0&t=689s) — The PHP bugs make national headlines13:44 (youtube.com/watch?v=SZVcFoxQqb0&t=824s&…) — Inside the researchers’ PHP vulnerability analysis15:56 (youtube.com/watch?v=SZVcFoxQqb0&t=956s) — Exploit risk, patching, and the long tail18:06 (youtube.com/watch?v=SZVcFoxQqb0&t=1086s) — Cloudflare’s mitigation and the response so far21:44 (youtube.com/watch?v=SZVcFoxQqb0&t=1304s) — Compromised certificate authority keys23:37 (youtube.com/watch?v=SZVcFoxQqb0&t=1417s) — Revoking certificates and restoring trust25:07 (youtube.com/watch?v=SZVcFoxQqb0&t=1507s) — The hidden infrastructure behind internet security28:11 (youtube.com/watch?v=SZVcFoxQqb0&t=1691s) — “We have a problem here” — shout-out to Wayne29:22 — What’s coming next