← Home
Odd Lots · October 30, 2026 · 49m

PHP2Shell Won't Be the Last Big AI Cybersecurity Risk

Earlier this year, cybersecurity researchers discovered a severe vulnerability in PHP, an open-source language powering roughly 70% of the world's websites, that had gone dormant for a long time and could have caused a disaster. Thai Duong and Bruce Dang of Calif — the firm among the first to find it — explain how frontier AI models were essential to understanding the bug's full extent. Calif partners with major AI labs and neoclouds to test models and hunt for infrastructure vulnerabilities. The conversation covers what Calif sells and how cybersecurity will change as AI becomes both an attack tool and a defensive capability.

This summary was generated from show notes and public descriptions, not from a full transcript review. Details may contain inaccuracies.

Preview

•
PHP's 70% Web Share Makes Any Dormant Bug Catastrophic
The PHP2Shell vulnerability sat undetected in PHP, an open-source language used by roughly 70% of the world's websites, and could have caused a disaster if exploited.
•
Frontier AI Models Reveal Vulnerability Extent
Calif's researchers only fully understood the scope of the PHP bug by using frontier AI models.

2 more ideas & all timestamps

This episode is in its early-access window. The full breakdown unlocks free in about 71 hours — Pro members read everything the moment it lands.

Read it now with Pro$10/mo · founding $96/yr
Was this useful?