AI-Powered Threat Actors, Poison Pills & Cyber Sabotage with John Hultquist
Google's John Hultquist breaks down hunting Sandworm, attacker AI speed, CISO budgets, and what makes an elite analyst.
Leor Markose
팟캐스트
Breaking Down PHP2Shell with Sagi Tzadik & Thai Duong
How AI just broke PHP (and 70% of the internet).
On this episode of Crying Out Cloud, Amitai Cohen sits down with Sagi Tzadik (Wiz Research) and Thai Duong (Calif) to unpack a massive PHP RCE vulnerability discovered entirely by AI agents. This isn't just another zero-day story. It's a look at the terrifying new reality of "agentic exploit development." What used to take human researchers months of tedious lab setups and debugging to weaponize a memory corruption bug took AI agents a couple of weeks, working while the researchers slept.
What's Inside:
- How an AI model looking for a Drupal bug accidentally found a foundational PHP flaw from 2004.
- Why AI scaling exploit development across multiple software versions changes the threat landscape.
- The massive logistical challenge of coordinating a patch for 70% of the web alongside distros, WAFs, and cloud providers.
- How defenders can use these same AI agents to scale detection engineering.
더 많은 에피소드
Empowering Human Potential, AI in Cybersecurity & Scaling Operational Growth with Daniel Miessler
AI in the SOC is broken. Daniel Miessler reveals why companies fail at AI security, SOC toil, and how attackers scale.
Leor Markose
WordPress RCE, GitHub vs TeamPCP & Why Meta Disabled Its Support Bot
Discover how AI hijacked Instagram, the 20-year SquidBleed flaw, and GitHub's fight against TeamPCP. Listen now!
Leor Markose
Crying Out Cloud 뉴스레터
안전하고 정보를 많이 받으세요: 최신 클라우드 보안 뉴스, 실제 공격 인사이트, 그리고 전문가의 지도를 받아 환경을 보호하세요.
클라우드 보안 최신 업데이트를 직접 받아보시려면 가입하세요