The PHP bug threatening the web. Plus, who's auditing AI?

Visit Security Intelligence podcast page to get more AI content → https://ibm.biz/~G9cZuMJdW An AI model helped researchers find two decade-old bugs in the code behind up to 70% of the web. Then the exploit details leaked before the patch did. This week on Security Intelligence, Nick Bradley, Don Cowan and Jim Guinn join host Patrick Austin to unpack three major cybersecurity stories. First, PHP2Shell could let attackers take over vulnerable servers without logging in. But you can't patch what you can't find, and PHP is buried in more systems than most teams realize. Then, Anthropic gives six outside evaluators employee-like access to test its AI models. Should frontier AI labs go further and let their competitors inspect their models? Finally, attackers hijack 333 Tor exit relays, rerouting traffic to harvest credentials. The way in? A reused password. A reminder that even attackers aren't immune to bad security hygiene. All that and more on Security Intelligence. 0:00 – Intro 01:14 – The PHP bug putting the web at risk 08:50 – Anthropic invites outside AI evaluators 16:10 – Hijacked Tor relays steal passwords "The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication." AI news moves fast. Sign up for a monthly newsletter for AI updates from IBM → https://ibm.biz/~PadbSocBp #aiauditing #PHPvulnerability #anthropic AI was used in the creation of the transcript and metadata for this video.