David Bianco built the Pyramid of Pain, so we offered him some more. David joins the crew for a conversation how AI changes about his famous model, how EvidenceForge creates simulated incidents for research and training, and why his red-team entrance exam didn’t go to plan.
First, we discuss the newly disclosed PHP vulnerabilities and the potential impact there (we recorded this on day 1 of the disclosure, hence expediting the release of this episode from its normal release schedule). Later, David’s decades of experience are put to work helping Hazel hack a fictional smart toilet company.
Here's the Talos advisory about the PHP vulnerabilities https://blog.talosintelligence.com/two-critical-rces-in-php-core/
