{"version":"1.0","type":"rich","provider_name":"Acast","provider_url":"https://acast.com","height":250,"width":700,"html":"<iframe src=\"https://embed.acast.com/$/6702dcb9c88f09c3e0b9a10a/6ae0e0847aa7eb2c8ac8bcd0?\" frameBorder=\"0\" width=\"700\" height=\"250\"></iframe>","title":"And then there was that little PHP vulnerability ","description":"<p>It&#39;s been a rough week for cybersecurity, and the crew is back to unpack the PHP vulnerability crisis, the controversy surrounding Chainguard&#39;s early disclosure, and why responsible disclosure is becoming increasingly complicated.</p><p><br></p><p>Elliot, Troy, and Kendra dig into how AI is accelerating vulnerability discovery, why traditional patching strategies aren&#39;t keeping up, and whether defenders need to fundamentally rethink vulnerability management.</p><p><br></p><p>Plus, the conversation somehow takes a detour through OnlyFans (thanks Kendra), cybersecurity marriage advice, and the questionable business potential of reading SOC 2 reports online.</p><p><br></p><p><strong>In this episode:</strong></p><ul><li>The PHP vulnerability crisis and Chainguard&#39;s disclosure controversy</li><li>Responsible disclosure versus protecting customers</li><li>AI&#39;s impact on zero-days and vulnerability management</li><li>Why risk-based prioritization matters more than ever</li><li>Whether AI agents can help defenders keep pace with attackers</li></ul>","author_name":"Chaos"}