PHP2Shell Causes Hell on a Friday 2026-10-26

The BHIS crew breaks down PHP2Shell, the challenges of emergency patching, and how AI-assisted vulnerability discovery is changing incident response. They discuss weak eMudhra certificate keys, Node2Shell and Brotli vulnerabilities, and security issues involving Plex, LiteLLM, GitLab, Broadcom Wi-Fi, and Popcorn Time. Other topics include AI agent frameworks used in attacks, research into self-propagating agents, context bombing as a defensive tactic, and the security and privacy implications of AI-assisted smart TV hacking. Join us LIVE on Mondays, 4:30pm ET. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis 🔴live-chat Chapters (00:00) - PreShow Banter™ — Ryan Fixes Audio (04:57) - PHP2Shell Causes Hell on a Friday 2026-10-26 (07:12) - PHP2Shell: AI-discovered vulnerabilities and emergency patching (16:47) - Azure incident response workshop and Denver training (25:19) - Weak eMudhra certificate keys and certificate trust failures (31:08) - Doc Blackburn’s encryption fundamentals workshop — December 4 (37:13) - Rapid-fire roundup: Plex, LiteLLM, and GitLab (38:37) - Storm-0940: AI agent frameworks and the ConnectWise compromise (40:23) - Research into self-propagating AI agents and botnets (42:34) - AI-assisted smart TV hacking and restrictions on security research (47:59) - Context bombing: Triggering AI guardrails to disrupt attacks (51:46) - John Strand’s Information Security Core Skills in the Era of AI — November 10–11 (52:02) - December Antisyphon summit: What in the Actual Cyber (52:46) - Broadcom Wi-Fi flaw: WPS memory exposure and stolen passwords (54:15) - OpenAI agent incidents and containment challenges (56:54) - Popcorn Time updater and supply chain attack risks Links PHP2Shell: AI-discovered vulnerabilities and emergency patching Azure incident response workshop ...and Denver training Weak eMudhra certificate keys and certificate trust failures Doc Blackburn’s encryption fundamentals workshop — December 4 Node2Shell: Brotli vulnerabilities and downstream patching Rapid-fire roundup: Plex, LiteLLM, and GitLab Storm-0940: AI agent frameworks and the ConnectWise compromise Research into self-propagating AI agents and botnets People are vibe coding their way to better TVs Context bombing: Triggering AI guardrails to disrupt attacks John Strand’s Information Security Core Skills in the Era of AI — November 10–11 December Antisyphon summit: What in the Actual Cyber Broadcom Wi-Fi flaw: WPS memory exposure and stolen passwords OpenAI agent incidents and containment challenges Popcorn Time updater and supply chain attack risks Creators & Guests Corey Ham - Host Ched "cheddar" Wiggins - Guest Ralph May - Host Bronwen Aker - Host Doc Blackburn - Guest Gerard Johansen - Guest Ryan Poirier - Producer Click here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.com Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com ☯️ Introducing BHIS Fusion Penetration Testing https://www.blackhillsinfosec.com/fusion-penetration-testing/ Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com