Home
Resources
The Resilience Room
PHP2Shell: Why the patch is no longer the finish line
Back to The Resilience Room

PHP2Shell: Why the patch is no longer the finish line

Oct 23, 2026
29min

Featuring

Portrait of a man with light beard and hair tied up, wearing a knitted sweater against a dark background.
Black and white portrait of a man with short hair and a beard, wearing a light-colored shirt with small patterns, looking slightly to the right against a background of vertical dark slats.
Black and white photo of a bald man with a beard and sunglasses, smiling and facing right with blurred foliage in the background.
Share

Episode description

In this episode, Sam Dickison is joined by Kev Breen, Senior Director of CTI at Immersive, and James Harris, Senior Cyber Security Engineer, to unpack what happened when PHP2Shell went public. Kev and James spent launch day reproducing the exploit with AI agents and a test range. They share what worked, what didn't, and why most public exploits aren't landing yet.

You'll learn:

  • Why a patch release is now the start of the race for attackers
  • What an n-day exploit is, and how AI has cut the time to build one from weeks to hours
  • Why most PHP2Shell exploit attempts fail against real targets
  • What to do now: patch, isolate, log headers and POST bodies, and alert when PHP spawns a shell
  • Why security through obscurity was never a defense

Resources mentioned:

About The Resilience Room: The Resilience Room is the Immersive podcast where security leaders, practitioners, and researchers talk cyber resilience, threats, and the industry. New episodes every other Tuesday.

Published:
Oct 23, 2026

Related Episodes

Portraits of two smiling men against a gradient background of red to purple vertical bars; the man on the left wears glasses and has a mustache and short curly hair, and the man on the right has a full afro and beard.
Oct 13, 2026
42min

AI and the Future of Cyber Security Jobs

In this episode, Sam sits down with Immersive's Nye Prior (Senior Manager, Cyber Security Content) and James Riley (Senior Talent Acquisition Partner) to explore how AI is fundamentally changing cyber security roles and the hiring process.
Listen Now
Two men standing side by side against a blue background, one with dark hair and beard wearing a black shirt, the other with light hair and beard wearing a white shirt, both looking slightly off to the side.
Sep 8, 2026
38 min

The AI Debt Bubble, Concentration Risk, and Stranded Assets

In this episode of The Resilience Room, Sam sits down with Corey Ray (Lead Intelligence Analyst) and Rob Klentzeris (Senior Application Security Engineer) to unpack the massive, debt-funded infrastructure boom driving the current AI race. Corey and Rob explain why traditional financial risk metrics fail when evaluating private AI titans, and how this unprecedented CapEx spending impacts enterprise risk models.
Listen Now
Three men with varying facial hair and hair colors looking slightly away from the camera, on a vertical gradient background transitioning from green to blue to purple.
Aug 25, 2026
31 min

When AI Agents Go Rogue

In this episode, Sam sits down with Immersive’s Kev Breen, Jason Flood, and Rob Klentzeris to discuss a wild new reality in cyber security: AI agents going rogue. Kicking off with the recent incidents of AI models escaping sandboxes—including OpenAI’s agent unexpectedly pivoting to attack Hugging Face—the team unpacks the chaos of autonomous attacks and why traditional attribution is becoming nearly impossible.
Listen Now