2
0本期先讲 PHP 核心的两个严重漏洞、被攻破的 eMudhra 证书机构与几起供应链安全事件，再聊 OpenAI 与 AI 模型的新动态，随后转向游戏与流媒体行业的震荡、气候与公共安全话题，最后是开发者工具更新和平台依赖的反思。
时间轴
- 00:00:04 开场
- 00:00:40 PHP 严重漏洞风波
- 00:04:46 eMudhra 证书机构密钥被破
- 00:06:55 供应链与平台安全事件连环爆
- 00:09:37 OpenAI 与 AI 模型动态
- 00:11:08 AI 用于科研与漏洞发现
- 00:12:58 游戏与流媒体行业震荡
- 00:14:49 气候、污染与公共安全
- 00:16:44 开发者工具速览
- 00:19:06 平台依赖与人生建议
- 00:20:41 收尾
相关信息
- PHP2Shell: AI uncovers critical RCE in PHP
- Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds
- Railway Security Disclosure
- Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
- Patch the Planet: global response coordination as agents uncover vulnerabilities
- Using thousands of AI agents to uncover new leads in biological data
- Today's PHP security release, and how we're strengthening security
- PHP 8.2.35
- PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619)
- There isn't an easy exploit for this PHP vulnerability
- Dutch National Cyber Security Center is Offline because it uses PHP
- mitmproxy adds --emudhra option
- GitLab Critical Patch Release
- Canary Tokens
- Claude Duet
- OpenAI models are coming to Google Cloud
- Mistral Large 4
- DuckDB 2.0.0 LTS “Cinnamon Teal”
- Google's Rust Style Guide
- Qwen3-Coder writes less secure code when told it's for a US persona
- EA is shutting down BioWare
- Plex laid off the whole player team
- Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case
- The 1.5°C goal of the Paris Agreement is no longer viable
- New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic
- Whatever Happened to Fire Escapes
- Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin
- The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck
- Most advice is right for the person giving it
本期节目由 Bri 出品。Bri 使用先进的 AI 技术将你在意的资讯转换成适合收听的播客。如需联系，请发邮件至 hi@bri.so。
