SN 1102: A Strategic Plug Pull - Lessons From a Global Patch-and-Panic Fire Drill

A newly uncovered PHP vulnerability put nearly 70% of the internet at risk, sending governments and enterprises into a frenzy as AI-powered attackers raced to exploit a flaw that had lurked unnoticed for 14 years. Hear why this could be just the start of an unrelenting wave of security crises.

• We take a detailed look at the many facets and aspects of last week's wild PHP ride:

• What happened.

• How it happened.

• Why it happened.

• How it could have been prevented.

• How it impacted many of our listeners.

• We consider the implications of what is said to be coming next and the idea of temporary "strategic disconnection" from the Internet

Show Notes - grc.com/sn/SN-1102-Notes.pdf

Hosts: Mikah Sargent (twit.tv/people/mikah-sargent) and Steve Gibson (twit.tv/people/steve-gibson)

Download or subscribe to Security Now at twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page (grc.com/feedback.htm).

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com/securitynow.htm, also the home of the best disk maintenance and recovery utility ever written Spinrite 6 (grc.com/sr/spinrite.htm).

Join Club TWiT for Ad-Free Podcasts!

Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: twit.tv/clubtwit

Sponsors:
• threatlocker.com/twit

• doppel.com/?utm_source=thisweekintech&utm_…

• hoxhunt.com/securitynow

• originhq.com/securitynow

• material.security