Cybersecurity Experts REACT to the php chaos... (and MORE)

Welcome to The Low Down, the best show on the internet for hackers Listen on Spotify! https://go.lowdownpod.com/spotify The Low Down is presented by Maze. LinkedIn: https://www.linkedin.com/company/mazehq/ X: https://twitter.com/Maze_Security ---------------- Today we're talking about: PHP2Shell and the Disclosure Fight Ed and Matt are at OneCon in Las Vegas as PHP2Shell sets off a chaotic week. We unpack the research, shaky AI exploit claims, Chainguard's early fixes and whether disclosure timelines can keep up. Dan Lorenc and the PHP Foundation give different accounts of the rollout. https://calif.io/php2shell/ https://www.linkedin.com/posts/danlorenc_i-wanted-to-share-what-happened-with-the-share-7518756991520120832-QX2_/ https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/ Kyle Polley's embargo discussion: https://x.com/kpolley/status/2113069186318577666 Your Certificate Authority's Private Key Was 4 One of eMudhra's private keys was literally four. We talk tiny keys, certificate trust, the company's exit from SSL/TLS and what happens when clients still trust compromised certificates. https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/ https://emudhra.we-have-a-problem.com/ https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business https://www.mitmproxy.org/posts/releases/mitmproxy-12.3/ Linux Bugs and the Power of a Pattern DirtyFrag, research credit and the latest kernel discussion lead into why Ed thinks AI is useful for spotting use-after-free patterns. DirtyFrag research: https://github.com/V4bel/dirtyfrag KSMBD background: https://docs.kernel.org/filesystems/smb/ksmbd.html Does AI Favor Attackers or Defenders? SentinelLABS' Tom Hegel makes the case for keeping powerful tools accessible to defenders. SentinelOne's Steve Stone explains why finding more bugs isn't the whole story: attack paths, speed, scale and the physics of an intrusion still matter. Meet the Threat Hunting World Champion Jason Walker joins us straight from his OneCon win. We get into his move from graphic design to security, CTF strategy, AI-assisted detection engineering and why the fundamentals still matter. OneCon: https://www.onecon.io/ ---------------- Follow Us! https://www.instagram.com/lowdown.pod Ed / Low Level Instagram: https://www.instagram.com/lowleveltv/ LinkedIn: https://www.linkedin.com/in/lowleveltv/ YouTube: https://www.youtube.com/@LowLevelTV Matt Johansen / Vulnerable U Instagram: https://www.instagram.com/mattjayy/ LinkedIn: https://www.linkedin.com/in/matthewjohansen/ YouTube: https://www.youtube.com/@VulnerableU Tom Hegel / SentinelLABS LinkedIn: https://www.linkedin.com/in/tom-hegel/ Steve Stone / SentinelOne LinkedIn: https://www.linkedin.com/in/stevenstone618/ Jason Walker / tresscross LinkedIn: https://www.linkedin.com/in/jasonwalker777/ Blog: https://tresscross.blog/