PHP2Shell Zero-Days Hit, Certificate Authority’s Private Key Was Literally 4

PHP had the kind of week that makes system administrators look at a cornfield and reconsider their career choices. Two critical remote code execution vulnerabilities, emergency patches, and a race to exploit them. Meanwhile, a certificate authority trusted to help authenticate the internet managed to produce a private key with the numerical value of four. This week, John and Logan break down the PHP2Shell story and the eMudhra certificate authority incident where the cryptography was not defeated. Someone just counted.
Stories in this episode:
PHP2Shell: critical bugs, emergency patches, and…