{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Talkin' Bout [Infosec] News","title":"PHP2Shell Causes Hell on a Friday 2026-10-26","html":"<iframe width=\"100%\" height=\"180\" frameborder=\"no\" scrolling=\"no\" seamless src=\"https://share.transistor.fm/e/1b2b68c2\"></iframe>","width":"100%","height":180,"duration":3552,"description":"The BHIS crew breaks down PHP2Shell, the challenges of emergency patching, and how AI-assisted vulnerability discovery is changing incident response. They discuss weak eMudhra certificate keys, Node2Shell and Brotli vulnerabilities, and security issues involving Plex, LiteLLM, GitLab, Broadcom Wi-Fi, and Popcorn Time. Other topics include AI agent frameworks used in attacks, research into self-propagating agents, context bombing as a defensive tactic, and the security and privacy implications of AI-assisted smart TV hacking.\nJoin us LIVE on Mondays, 4:30pm ET.\nA weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.\nhttps://www.youtube.com/@BlackHillsInformationSecurity\nChat with us on Discord! -\nhttps://discord.gg/bhis\n🔴live-chat\nChapters\nLinks\nPHP2Shell: AI-discovered vulnerabilities and emergency patching\nAzure incident response workshop\n...and Denver training\nWeak eMudhra certificate keys and certificate trust failures\nDoc Blackburn’s encryption fundamentals workshop — December 4\nNode2Shell: Brotli vulnerabilities and downstream patching\nRapid-fire roundup: Plex, LiteLLM, and GitLab\nStorm-0940: AI agent frameworks and the ConnectWise compromise\nResearch into self-propagating AI agents and botnets\nPeople are vibe coding their way to better TVs\nContext bombing: Triggering AI guardrails to disrupt attacks\nJohn Strand’s Information Security Core Skills in the Era of AI — November 10–11\nDecember Antisyphon summit: What in the Actual Cyber\nBroadcom Wi-Fi flaw: WPS memory exposure and stolen passwords\nOpenAI agent incidents and containment challenges\nPopcorn Time updater and supply chain attack risks\n\n\n🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits \nhttps://poweredbybhis.com\n\nBrought to you by:\nBlack Hills Information Security \nhttps://www.blackhillsinfosec.com\n\n☯️ Introducing BHIS Fusion Penetration Testing\nhttps://www.blackhillsinfosec.com/fusion-penetration-testing/...","thumbnail_url":"https://img.transistorcdn.com/WPYM9pq_SRUcywHv9tdgpsGLyLx04W2rDmzktvAcD4Y/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS8xZTA1/ZWZhNDcxZGM4ZTFj/ZGJhMTMwNmYzMmJj/ZjBkNi5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}