Tor, PhP2Shell, Deepfakes, eMudhra, LiteLLM, Meta, Josh Marpet, and More - SWN #627
Summary
This episode covers critical security news, including the "PHP to Shell" remote code execution vulnerabilities and the compromise of LightLLM via malicious packages. The hosts also discuss a $25 billion ruling against Meta, weak SSL keys issued by eMudra, and the hijacking of over 300 Tor exit nodes. Additionally, guest Josh Marpet analyzes the growing risks of AI deepfakes and the need for comprehensive AI supply chain governance.
Topics discussed
Intro, Halloween costume banter, and show sponsor
Network Security Virtual Summit promotion
PHP to Shell: Critical RCE vulnerabilities and patches
Global spread of PHP attacks and AI exploit chains
AI security leadership, governance, and CISO roles
Deepfakes, voice authentication, and the movie Sneakers
eMudra SSL/TLS weak keys and certificate scandal
LightLLM supply chain compromise and incident response
Meta $25 billion verdict and Cambridge Analytica data
ThreatLocker zero trust sponsor segment
Interview with Josh Marpet on AI supply chain security
Tor exit node hijacking and password reuse risks
Listen ad-free on Castria