TBPN
TBPN

Matthew Prince on PHP2Shell, iPhone Duo Early Reactions, Meta Unveils New Class C Stock | Matthew Prince, Kevin Weil, MC Lader, Dillon Baxter, Richard Starson, Brian Manning

October 22, 2026

AI Summary

5 min read

In a single week, the internet faced one of the worst vulnerabilities ever discovered in PHP—a language that powers roughly 70% of the web—alongside a catastrophic failure in the encryption infrastructure that underpins global trust. Matthew Prince, CEO and co-founder of Cloudflare, joined the show to explain what happened, why it signals a new normal, and why he believes the internet is actually getting safer, not more dangerous, even as it feels like the sky is falling.

The PHP2Shell Vulnerability: How It Was Found and What It Does

About two months before the public disclosure, OpenAI, working with security researchers, discovered a remote code execution (RCE) vulnerability in PHP. This is a programming language used by the vast majority of the web, including content management systems like WordPress. An RCE vulnerability means an attacker can send basic requests to a server and then take it over completely—reading files, stealing usernames and passwords, or conscripting the server into a botnet. Shortly after, Wiz (a Google subsidiary) found a second, related vulnerability.

Continue reading the full summary in the app — free to try.

Read Full Summary →

Free • No credit card required

Listen to Audio Summary Open in App

What you'll learn

  • 1 (01:01) **PHP2Shell: The Vulnerability Timeline & Definition** - Matthew Prince explains how OpenAI and Wiz/Google discovered a critical remote code execution vulnerability in PHP about two months ago.
  • 2 (04:59) **From Secret to Crisis: The Leak & Attack Wave** - The secret held for two months, but a leak in the last 36 hours forced the PHP patch release, triggering a massive attack wave.
  • 3 (06:14) **Consumer Impact & The Week's Other Major Vulnerabilities** - While PHP is a server-side issue, two other disclosed vulnerabilities this week directly affect consumers.
  • 4 (09:08) **The AI Paradox: Scary Stories vs. a Safer Internet** - Prince reframes the wave of vulnerabilities as a necessary, positive process driven by AI, not a crisis.
  • 5 (11:21) **How AI is Changing the Attack Landscape** - AI is not yet driving mass exploitation of known bugs, but it's fundamentally changing what attackers can do once they get inside a system.
  • 6 (14:03) **The New Gold Rush: Stealing Tokens & Inference** - The current wave of attacks on AI infrastructure (like OpenAI and Railway) is driven by the desire for more compute and model access.
  • 7 (17:34) **The Geopolitics of Compute in Cybersecurity** - The balance between attackers and defenders is becoming an infrastructure-driven game, favoring those with more compute.

+ Full timestamped outline available in the app

Show Notes

  • (00:36) - Matthew Prince on PHP2Shell. Matthew Prince is the co-founder and CEO of Cloudflare, a company focused on internet security and infrastructure. Prince discusses major cybersecurity vulnerabilities, AI’s growing role in finding and defending against threats, and why rapid software updates and industry coordination are essential. He also predicts that surging AI-agent traffic will reshape the internet’s business model through mechanisms such as micropayments.
  • (29:12) - 𝕏 Timeline Reactions
  • (38:05) - Meta Unveils New Class C Stock
  • (47:07) - Kevin Weil, founder of Warp Sciences, discusses building AI-powered robotic laboratories to accelerate drug discovery and reshore critical pharmaceutical research from China to the United States. He explains the company’s vertically integrated approach, growing market opportunity, and $215 million funding round to build a next-generation preclinical contract research organization.
  • (01:01:39) - Mc Lader discusses his role as the new head of Cognition Industries, drawing on his experience as a frontier-tech founder and former president of a stablecoin company acquired by Coinbase. He outlines Cognition’s strategy to build small, founder-led teams across 14 major industries, combining vertical expertise with Devin’s AI agents to help enterprises modernize software, strengthen security, and create industry-specific products.
  • (01:12:16) - Dillon Baxter discusses PlantSwitch, the sustainable packaging company he co-founded to replace disposable plastics with plant-based materials that biodegrade without leaving microplastics. He explains the company’s vertically integrated manufacturing, rapid growth, major distribution partnerships, and plans to use its Series B funding to expand into plastic-free coffee cups and lids.
  • (01:20:18) - Richard Starson, founder and CEO of Stelius, discusses building U.S.-made high-power microwave systems for defense applications, particularly neutralizing drone swarms and protecting critical infrastructure. He also outlines the company’s early funding and long-term goal of advancing compact fusion for energy, hypersonics, and spaceflight.
  • (01:28:42) - Brian Manning, founder and CEO of space-based navigation company Xona Space Systems, discusses launching six satellites, raising $250 million, and scaling manufacturing for its commercial GPS alternative. He explains how Xona’s stronger, jam-resistant signals can improve positioning accuracy, indoor coverage, device integration, and battery efficiency for commercial and military users.
  • (01:42:54) - iPhone Duo Early Reactions


TBPN is made possible by:

Ramp - https://ramp.com

Public - https://public.com

Cisco - https://www.cisco.com

Console - https://www.console.com

CrowdStrike - https://www.crowdstrike.com

Figma - https://www.figma.com

MongoDB - https://www.mongodb.com

NYSE - h

TBPN

More from this podcast

TBPN →