PHP2Hell - Joshua Wright - PSW #949
Summary
This episode of Security Weekly features special guest Joshua Wright, who discusses the distinctions between incident response, forensics, and threat hunting while promoting his new, freely available incident response book. The security news segment covers critical PHP vulnerabilities affecting major vendors, small cryptographic keys, Tor exit node traps, and USB-C firmware updates. Additional topics include AI agents in offensive cyber operations, NIST curve mysteries, and critical patches for NGINX and Node.js.
Topics discussed
Intro, guest welcome, and show headlines
Defining incident response, forensics, and threat hunting
Career advice, writing skills, and AI in documentation
Rebooting the Incident Response Step-by-Step book series
PHP to shell vulnerabilities and emergency patching
Operational resilience, SBOMs, and incident communication
WPS buffer overflow in Broadcom wireless chips
USB-C cable firmware and the Hail Hound project
NSA backdoor allegations and PRNG security
AI agents, autonomous malware, and human oversight
Nuclear power for AI data centers and energy policy
Listen ad-free on Castria