In this episode, host Elliot Volkman is joined by Carly Sherrod of Microsoft’s Detection and Response Team (DART) and Spencer McIntyre, Director of Exploit Development at VulnCheck to break down the critical PHP2Shell vulnerabilities. They explore how the exploits work, the reality behind reports of widespread attacks, and how AI is accelerating exploit development. The conversation also covers what security teams should look for, how to assess potential exposure, and why patching alone may not be enough to protect vulnerable systems.
In this episode you’ll learn:
- How the critical PHP2Shell vulnerabilities work
- Why patching alone isn’t enough to protect vulnerable systems
- How AI is accelerating exploit development
Some questions we ask:
- What is Microsoft DART seeing from an incident response perspective?
- Which PHP configurations and deployments should be prioritized?
- What should security teams do immediately to protect their organizations?
Resources:
VulnCheck’s research on PHP2Shell
MSRC’s guidance on PHP2Shell
For customers: Recommended controls and actions
Discover and follow other Microsoft podcasts at microsoft.com/podcasts
Get the latest threat intelligence insights and guidance at Microsoft Security Insider
The Microsoft Threat Intelligence Podcast is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.
