AI Security and Safety: The Agent State Has Arrived | Hear what’s next from President Michael Sentonas Register now
CrowdCast

PHP2Shell: What You Need to Know Now and How to Prepare for What's Next

PHP2Shell What You Need to Know and How to Prepare
By clicking submit, I consent to the processing of my contact information by CrowdStrike and its partners, including to CrowdStrike contacting me and sharing my contact information with its partners. I acknowledge that CrowdStrike will use and keep my contact information for as long as necessary for these purposes in accordance with its Privacy Notice.
CrowdStrike logo

Your registration has been received!

Please check your inbox for more information.

A conversation with CrowdStrike and OpenAI

On-Demand

Two critical vulnerabilities in the widely used PHP engine could allow attackers to execute commands without authentication, potentially leaving no obvious signs in application logs. With about 275,0001 IP addresses running vulnerable PHP services and exploit attempts in the millions, security teams are asking three questions: Are we affected and what should we do? How do we detect and stop an attack? How do we prepare for the future?

Join CrowdStrike's Adam Meyers, Senior Vice President, Counter Adversary Operations, CrowdStrike's Anthony Roman, Detection Product Leader, and OpenAI's Clint Gibler, Cyber Security Research Lead, for a practical look at what researchers have learned, how adversaries are responding, and clear steps to find affected systems, apply fixes, and detect suspicious activity.

Then we'll look ahead. Frontier AI-assisted research found PHP2Shell in code that had been in PHP for years, and the time from discovery to exploitation is getting shorter. We’ll discuss why traditional vulnerability management is under pressure and what teams can do now to prepare.

Know what's at risk. Act on what matters. Be ready for what's next.

1 Based on CrowdStrike Falcon® Exposure Management external attack surface management (EASM) data

Featured Speakers
Adam Meyers
Adam Meyers

Senior Vice President, Counter Adversary Operations

CrowdStrike

Read bio
Anthony Roman
Anthony Roman

Director, Product Management

CrowdStrike

Read bio
Clint Gibler
Clint Gibler

Cyber Security Research Lead

OpenAI

Read bio
Additional Resources
Anthony Roman

Anthony Roman


Director, Product Management, CrowdStrike

 

Anthony Roman is a Product leader responsible for threat detection for cloud and endpoint security. His team works with teams across the company to establish the detection and research roadmap based on CrowdStrike's unique understanding of the evolving threat landscape.
Clint Gibler

Clint Gibler


Cyber Security Research Lead, OpenAI

 

Clint Gibler is the Cyber Security Research Lead at OpenAI, focusing on how AI can help defenders build and secure software. Previously, he led security research at Semgrep and was a Research Director at NCC Group. Clint is the creator of the tl;dr sec newsletter and holds a Ph.D. in Computer Science.
Adam Meyers

Adam Meyers


Senior Vice President, Counter Adversary Operations, CrowdStrike

 

Adam Meyers leads CrowdStrike's Threat Intelligence business, directing a globally dispersed team of cyber threat experts. Together, they track criminal, state-sponsored, and nationalist cyber adversary groups across the globe, producing actionable intelligence to protect customers. He oversees the development and deployment of AI, machine learning, reverse engineering, natural language processing, and other technologies to detect suspicious and malicious cyber behavior and stop increasingly sophisticated adversaries. Meyer's work continues to transform cybersecurity.