Risky Business #856 -- 8-bit encryption, PHP megabugs and more

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host security engineer Mark El-Khoury to talk through the week’s cybersecurity news, including:

The PHP foundation is about to release patches for a couple of critical bugs… We’re watching to see if the internet burns down

8 private keys underpinning some CA certs got compromised. The keys only had 8 bits of entropy!

Is the breach-polcalypse upon us?

OpenAI’s inside spy, Anthropic’s safety bill and election influence campaigns are coming for your chatbots

Ukraine drone strikes hit more Russian data centres, this time VK’s in the firing line

Much, much more!

This week’s show is brought to you by Trail of Bits. Principal Security Engineer Anish Naik joins James Wilson to chat about two agent skills plugins, Patching Bugs and Regression Hunt, that the company is releasing off the back of its joint initiative with Open AI, Patch the Planet.

This episode is also available on YouTube