TBPN
TBPN

Cybersecurity Red Alert, SpaceX Earnings, OpenAI Strikes Google Deal | Diet TBPN

October 21, 2026

AI Summary

5 min read

PHP to Shell: The Most Severe PHP Vulnerability in a Decade

The hosts opened with an unusual admission: John was out sick for the first time in the show's history, leaving them "a ship without a sail." But the day's biggest story demanded attention regardless — a catastrophic security vulnerability in PHP, the language powering roughly 70% of all websites, had just gone public after months of secret patching.

The PHP Vulnerability and What Makes It Different

The flaw, dubbed "PHP to shell," represents a class of problems in how PHP manages computer memory. Security researcher Ryan Austin at the company Caliph uncovered it during an audit of PHP source code in August — with help from GPT-5.6, one of OpenAI's most advanced models. OpenAI had funded those audits as part of a broader effort to help open source projects address vulnerabilities now being uncovered by AI systems.

The class of bugs had been hiding in PHP source code for years. A security researcher had flagged the problem area decades earlier, but the flaw was considered too difficult to exploit and was largely forgotten. AI found a way. Austin figured out how to control the code running in a computer's memory with as few as a few dozen requests to a server running PHP. On smaller systems, the hack takes seconds. On more complex ones, it can take hours.

Continue reading the full summary in the app — free to try.

Read Full Summary →

Free • No credit card required

Listen to Audio Summary Open in App

What you'll learn

  • 1 (00:01) **Show Opening & John's Absence** - The hosts explain John is out sick and introduce the day's major topics, including a critical PHP vulnerability and upcoming guest interviews.
  • 2 (02:36) **Critical PHP Vulnerability ("PHP to Shell")** - The hosts break down a newly disclosed, severe security flaw affecting roughly 70% of all websites, comparing it to Heartbleed.
  • 3 (08:42) **Implications of the PHP Patch & AI's Role** - The hosts discuss the race between defenders and hackers after the patch leaks, and the new risks introduced by AI-powered exploit generation.
  • 4 (11:15) **Trevor Milton's New Jet Startup** - The hosts discuss the launch event for Trevor Milton's new private aviation company, with a friend of the show attending.
  • 5 (13:10) **iPhone Duo Early Reviews** - The hosts analyze the first wave of reviews for Apple's new foldable phone, focusing on app optimization and camera quality.
  • 6 (16:51) **SpaceX Q3 Earnings Call** - The hosts review key takeaways from SpaceX's earnings call, including Starship progress and Elon Musk's comments on AI compute demand.
  • 7 (22:29) **SpaceX's Massive Revenue Projection** - The hosts discuss Elon Musk's claim that SpaceX's annual recurring revenue could reach between $500 billion and $1 trillion by the end of 2027.

+ Full timestamped outline available in the app

Show Notes

Diet TBPN delivers the best of today’s TBPN episode in 30 minutes. TBPN is a live tech talk show hosted by John Coogan and Jordi Hays, streaming weekdays 11–2 PT on X and YouTube, with each episode posted to podcast platforms right after.

Described by The New York Times as “Silicon Valley’s newest obsession,” the show has recently featured Mark Zuckerberg, Sam Altman, Mark Cuban, and Satya Nadella.

TBPN is made possible by:
Ramp - https://ramp.com
Public - https://public.com
Cisco - https://www.cisco.com
Console - https://www.console.com
CrowdStrike - https://www.crowdstrike.com
Figma - https://www.figma.com
MongoDB - https://www.mongodb.com
NYSE - https://www.nyse.com
Railway - https://railway.com
Shopify - https://www.shopify.com/

Follow TBPN: 
https://TBPN.com
https://x.com/tbpn
https://open.spotify.com/show/2L6WMqY3GUPCGBD0dX6p00?si=674252d53acf4231
https://podcasts.apple.com/us/podcast/technology-brothers/id1772360235
https://www.youtube.com/@TBPNLive

TBPN

More from this podcast

TBPN →