Security Weekly - A CRA Resource: PHP2Hell - Joshua Wright - PSW #949

Special guest Joshua Wright joins us for a timely incident-response discussion!



Then, in the security news this week:



- Have you heard about PHP2Shell?

- Certificates with keys small enough to guess

- Tor exit nodes turn into SSH credential traps

- Do USB-C cables need firmware updates now?

- HaleHound packs a radio lab into a cheap display

- Claude solves part of the NIST curve mystery

- The Army and self-directed offensive cyber agents

- Retired nuclear reactors return to power AI

- PatchSlop

- NGINX, NODE.js patches critical flaws

- BeyondTrust exploited before the patch landed

- Plex vulnerabilities move from PoC to exploitation

- ICS patches, including a Siemens flaw exploited in the wild

- Can fake data trigger Japan’s emergency alert?

- Agentic pentests?

- AI may add noise more than skill

- AI agents navigate OT and move equipment

- AI model helps build a Chrome exploit

- Utah’s VPN law runs into technical reality



Segment Resources:



https://dynamicincidentresponse.com/ - A New Era for Incident Response!



Visit https://www.securityweekly.com/psw for all the latest episodes!



Show Notes: https://securityweekly.com/psw-949