Skip to content
Sign in
Artwork for Security Intelligence Podcast
Security Intelligence Podcast · Yesterday · 20 min

The PHP bug threatening the web. Plus, who's auditing AI?

Visit Security Intelligence podcast page to get more AI content → https://www.ibm.com/think/podcasts/security-intelligence An AI model helped researchers find two decade-old bugs in the code behind up to 70% of the web. Then the exploit details leaked before the patch did. This week on Security Intelligence, Nick Bradley, Don Cowan and Jim Guinn join host Patrick Austin to unpack three major cybersecurity stories. First, PHP2Shell could let attackers take over vulnerable servers without logging in. But you can't patch what you can't find, and PHP is buried in more systems than most teams realize. Then, Anthropic gives six outside evaluators employee-like access to test its AI models. Should frontier AI labs go further and let their competitors inspect their models? Finally, attackers hijack 333 Tor exit relays, rerouting traffic to harvest credentials. The way in? A reused password. A reminder that even attackers aren't immune to bad security hygiene. 0:00 – Intro 01:14 – The PHP bug putting the web at risk 08:50 – Anthropic invites outside AI evaluators 16:10 – Hijacked Tor relays steal passwords All that and more on Security Intelligence. "The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."

0:00-20:22
Play in

transcript

No transcript — this publisher did not publish one.

show notes

Visit Security Intelligence podcast page to get more AI content → https://www.ibm.com/think/podcasts/security-intelligence

An AI model helped researchers find two decade-old bugs in the code behind up to 70% of the web. Then the exploit details leaked before the patch did.

This week on Security Intelligence, Nick Bradley, Don Cowan and Jim Guinn join host Patrick Austin to unpack three major cybersecurity stories.

First, PHP2Shell could let attackers take over vulnerable servers without logging in. But you can't patch what you can't find, and PHP is buried in more systems than most teams realize.

Then, Anthropic gives six outside evaluators employee-like access to test its AI models. Should frontier AI labs go further and let their competitors inspect their models?

Finally, attackers hijack 333 Tor exit relays, rerouting traffic to harvest credentials. The way in? A reused password. A reminder that even attackers aren't immune to bad security hygiene.

0:00 – Intro

01:14 – The PHP bug putting the web at risk

08:50 – Anthropic invites outside AI evaluators

16:10 – Hijacked Tor relays steal passwords

All that and more on Security Intelligence.

"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."

links1

more episodes

All episodes