HTTP2Shell emergency updates, PHP2Shell attacks, GitHub worm

Defense in DepthOctober 27, 2026Vulnerabilities

Runs 7:31. Streams from traffic.libsyn.com only when you press play.

HTTP2Shell sparks emergency patches https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/ PHP2Shell: patch, then investigate https://www.securitymagazine.com/articles/102693-php2shell-exploited-in-the-wild GitHub worm hides in oversized files https://www.theregister.com/security/2026/10/26/worm-armed-42-github-repos-by-hiding-a-payload-too-big-to-fail/5305570 Cathedral gets inside Anthropic…

Show notes from Defense in Depth.

Episode page at Defense in Depth

Explained

The technology and terms in this story. Learn more

ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.

HTTP2Shell emergency updates, PHP2Shell attacks, GitHub worm

Explained

More in Vulnerabilities

CISA confirms PHP2Shell vulnerabilities now exploited in attacks

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

Microsoft Authenticator vulnerability let rogue Android apps steal work account access

71% of vulnerability exploitation starts within a week of disclosure

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution