Matthew Prince on PHP2Shell, iPhone Duo Early Reactions, Meta Unveils New Class C Stock | Matthew Prince, Kevin Weil, MC Lader, Dillon Baxter, Richard Starson, Brian Manning

A critical PHP vulnerability and weak root-server passwords show cybersecurity risk accelerating even as AI-driven defense and a wave of new deep-tech raises reshape infrastructure.

• PHP RCE crisis: A critical remote-code-execution bug in PHP (used by ~70% of the web) was found by OpenAI and Google's Wiz roughly two months ago and quietly patched industry-wide before disclosure forced public release this week, after which Cloudflare saw attacks spike from thousands to millions per minute.
• Root key servers used '4' as a password: An Indian company operating Internet root key servers used passphrases as weak as the number 4 or 136 instead of the required 328-bit minimum, exposing browsers to spoofing until patched.

Themes, sentiment and reasons are AI-written paraphrases, checked so they never quote an episode. They may contain errors. Not investment advice. Episodes remain the property of their creators.