PHP2Hell - Joshua Wright - PSW #949

Special guest Joshua Wright joins us for a timely incident-response discussion!
Then, in the security news this week:
• Have you heard about PHP2Shell?
• Certificates with keys small enough to guess
• Tor exit nodes turn into SSH credential traps
• Do USB-C cables need firmware updates now?
• HaleHound packs a radio lab into a cheap display
• Claude solves part of the NIST curve mystery
• The Army and self-directed offensive cyber agents
• Retired nuclear reactors return to power AI
• PatchSlop
• NGINX, NODE.js patches critical flaws
• BeyondTrust exploited before the patch landed
• Plex vulnerabilities move from PoC to exploitation
• ICS patches, including a Siemens flaw exploited in the wild
• Can fake data trigger Japan's emergency alert?
• Agentic pentests?
• AI may add noise more than skill
• AI agents navigate OT and move equipment
• AI model helps build a Chrome exploit
• Utah's VPN law runs into technical reality
Segment Resources:
dynamicincidentresponse.com - A New Era for Incident Response!
Visit securityweekly.com/psw for all the latest episodes!
Show Notes: securityweekly.com/psw-949