Show notes
In this episode, we break down three security stories:
• PHP2Shell one week later: working shells, a KEV listing, and exploit noise
• Node2Shell, a Brotli flaw whose public fix went unreleased for eight months
• Mimori ransomware claims against OpenText and AVEVA, and what's actually confirmed
We also cover Bishop Fox research on which PHP configurations turn PHP2Shell into remote code execution, and what Claude revealed about its own sandbox when a researcher started asking questions.
Security Headlines:
• CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code…
