The Internet has been Hacked
from AI Psychosis Hosted by Thomas Bekkers and Rudy Faile
PHP security vulnerabilities, eMudhra certificate trust, LiteLLM and AI vulnerability research: Thomas Bekkers and Rudy Faile discuss PHP security vulnerabilities, eMudhra certificate trust, LiteLLM, and how AI is changing vulnerability research. Hosts: Thomas Bekkers (@thomasbekkers) and Rudy Faile. 0:00 PHP security discussion 1:24 How researchers disclose vulnerabilities 3:44 Hosting providers and mitigations 5:24 What website owners can do 8:30 eMudhra and certificate trust 11:53 LiteLLM and software dependencies 14:12 AI and vulnerability research 17:35 Closing thoughts WHAT TO DO If you run PHP yourself (VPS, dedicated server, or your own containers), upgrade now. Patched versions: 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35. If you're on a managed host, check your host's status page or blog and confirm the update has been applied. THE VULNERABILITIES CVE-2026-109618: remote code execution via out-of-memory corruption. CVE-2026-109619: remote code execution via stale global state. Both are rated CVSS 9.2 (Critical). SOURCES PHP Foundation: https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/ Automattic: https://automattic.com/2026/10/21/php2shell/ Host: Thomas Bekkers on YouTube Watch on YouTube: https://youtu.be/fPvT1nY0JqU
Embed this episode
No transcript yet.