Punching Upwards

AI has found a very serious vulnerability in 70% of websites. Are we lucky here? Or will the world end because of it? In fact, AI has almost nothing to do with this story. Humans do, however.Punching Upwards, Episode 59 for 25 October 2026Topics: Infosec / Artificial Intelligence🦉 No AI Content 📢 Podcast RSS FeedCreditsThanks to Michael Mullan-Jensen, Evgeny Kuznetsov, Vlad A Gouf, Fadi Mansour, Bennet Piater, Eric and Sir Galteran for supporting this podcast financially and therefore making it possible for me to produce it!Sources* A tale of two PHP remote vulnerabilities, Ryan Austin, Calif, 21 October 2026* PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet, Sagi Tzadik et al., Wiz, 21 October 2026* Today’s PHP Security Release, and How We’re Strengthening PHP Security, The PHP Foundation, 21 October 2026* Finding and Exploiting a 21-Year-Old Vulnerability in PHP, Ryan Austin, Calif, 1 May 2026* PHP Audit Complete!, OSTIF, 10 April 2025* PHP memory_limit remote vulnerability, Stefan Esser, Bugtraq, 13 July 2004* Exploiting the php <= 4.3.7 memory_limit bug, Bas Alberts, 18 August 2004 (archived copy)* Sicherheitsspezialist verlässt resigniert PHP-Security-Team, Daniel Bachfeld, heise online, 13 December 2006* PHP Security Specialist (Stefan Esser) Resigns, Darknet, 18 January 2007* Long variables in multipart/form-data cause OOM and temp files are not cleaned, [email protected], PHP Bug Tracker, 28 November 2019* AI tools discovered the PHP vulnerability that could take down 70% of the internet. Now, the race is on to patch it before AI-powered hackers attack, Emily Forlini, Fortune, 21 October 2026* AI Just Found a Bug That Puts up to 70% of the World’s Websites at Risk, Robert McMillan, The Wall Street Journal, 21 October 2026* A.I. Discovered a Critical Security Flaw Underpinning Websites, Dustin Volz, The New York Times, 21 October 2026* Government websites go dark after AI-discovered flaw sparks security scramble, Raphael Satter et al., Reuters, 21 October 2026* Wichtige PHP-Updates am 21. Oktober beheben Codeeinschleusung-Schwachstellen, Dr. Christopher Kunz, heise online, 21 October 2026* php2shell: Kritische Sicherheitslücken erlauben Codeeinschleusung in PHP, Dr. Christopher Kunz, heise online, 21 October 2026* CVE-2026-109618, cve.org, 21 October 2026* CVE-2026-109619, cve.org, 21 October 2026* Security Advisory 2026-018, CERT-EU, 20 October 2026* Version 1.2: PHP - Kritische Schwachstellen bedrohen Webanwendungen weltweit, Bundesamt für Sicherheit in der Informationstechnik, 22 October 2026* Patch the Planet: a Daybreak initiative to support open source maintainers, OpenAI, 22 June 2026* Websites taken down worldwide as AI reveals critical cyber-security threat, The BBC, 21 October 2026* A flaw in PHP is taking down websites. Is the internet at risk?, The BBC, 22 October 2026* Websites went down around the world. Did AI stop it getting worse?, The BBC, 22 October 2026* Expert explains the PHP bug that could take down 70% of the internet, CBS News, 22 October 2026* Websites taken down worldwide over critical PHP vulnerabilities, Deutsche Welle, 22 October 2026* Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched, Lily Hay Newman, Wired, 21 October 2026* Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot, CJ Moses, AWS, 21 October 2026The theme music for the podcast is a track called Fight or Fall by Def Lev. Find out more about the show at fab.industries/podcast — new media, new rules! Get full access to Punching Upwards at punchingupwards.substack.com/subscribe

Who are the Houthis? Why do they have cruise missiles? And what is Saudi Arabia’s involvement in Yemen?Punching Upwards, Episode 58 for 18 October 2026Topics: Politics / War in Iran🦉 No AI Content 📢 Podcast RSS FeedCreditsThanks to Michael Mullan-Jensen, Evgeny Kuznetsov, Vlad A Gouf, Fadi Mansour, Bennet Piater, Eric and Sir Galteran for supporting this podcast financially and therefore making it possible for me to produce it!See Also* PU 45: The Iran Peace Deal is Over* PU 41: The Iran Peace Deal* PU 36: Dire Straits of Hormuz* PU 26: Trump Falls Into the Smart Bomb TrapSources* “No Agenda” Is Over, FAB INDUSTRIES, 17 October 2026* A besieged city could shift the outcome of Yemen’s war, Reuters, 17 October 2026* Deadly Houthi missile attack on Yemeni presidential palace, The BBC, 15 October 2026* Saudi Arabia’s Disastrous, US-Backed War in Yemen Explained, Glenn Greenwald, 14 October 2026* Yemen’s Houthis claim responsibility for fresh missile strike on Aden airport, France 24, 17 October 2026* Houthis “shoot down” Saudi Typhoon, The Telegraph, 15 October 2026* Houthis Launch Deadly Attack on Yemen’s Presidential Palace, Breitbart, 16 October 2026* Foreign policy expert and strategist speaks on Gaza, Cuba, Yemen, China and more, Wisconsin Muslim Journal, 28 August 2026The theme music for the podcast is a track called Fight or Fall by Def Lev. Find out more about the show at fab.industries/podcast — new media, new rules! Get full access to Punching Upwards at punchingupwards.substack.com/subscribe

The amazing story of how helping plot a kidnapping for a steakhouse fortune heiress brought down the former head of the German foreign intelligence service BND.Punching Upwards, Episode 57 for 11 October 2026Topics: Politics / Intelligence Services🦉 No AI Content 📢 Podcast RSS FeedCreditsThanks to Michael Mullan-Jensen, Evgeny Kuznetsov, Vlad A Gouf, Fadi Mansour, Bennet Piater, Eric and Sir Galteran for supporting this podcast financially and therefore making it possible for me to produce it!See Also* PU 53: The AfD Wins Bigly* PU 51: Why Did the CIA Director Fly to Moscow?* PU 4: Drones over DenmarkSources* German ex-spy chief arrested for suspected espionage, treason, France 24, 6 October 2026* Germany arrests former intelligence chief over alleged spying, The Guardian, 6 October 2026* Ex-BND-Chef August Hanning verhaftet, Der Spiegel, 6 October 2026* August Hanning, WikiSpooks, undated* Neue Kritik am geplanten Machtzuwachs, TAZ, 7 October 2026* ECB has assessed that AS PNB Banka in Latvia was failing or likely to fail, European Central Bank, 15 August 2019* US Officials Accuse German Intelligence of Pre-Iraq War Failures, Der Spiegel, 20 March 2008* Fall um Block-Kinder: Ex-BND-Chef Hanning soll an fehlgeschlagenem Entführungsversuch beteiligt gewesen sein, Tagesspiegel, 8 November 2025* Der Block-Komplex und der schwere Verdacht gegen den Ex-BND-Präsidenten, Welt, 11 November 2025* Unternehmer verweigert Aussage: Eugen Block wirft Richterin im Prozess um seine Tochter Befangenheit vor, Tagesspiegel, 4 November 2025* Block-Prozess: Welche Rolle spielte der Alpakahof-Besitzer?, NTV, 27 October 2025* Die Zeugin, die Christina Block am nächsten stand, Die Zeit, 16 January 2026* Dänische Polizei warnte Christina Blocks Ex-Mann vor Mordanschlag auf ihn, Der Stern, 24 May 2025* Block-Prozess: Israeli hatte immer wieder Erinnerungslücken, Hamburger Abendblatt, 29 August 2025* Sorgerechtsstreit Block / Hensel wirft viele Fragen auf / Teil 1: Chronologie (archived copy), Wirklich, undated* Erfolglose Verfassungsbeschwerde in einem grenzüberschreitenden Sorgerechtsfall, Bundesverfassungsgericht, 9 April 2025* Henrike von Scheliha: Der Fall Block - Die Grenzen elterlicher Sorge, Brucerius Law School, 25 July 2025* Der Block-Prozess: Besonders ein Strippenzieher gerät ins Visier, T-Online, 25 July 2025* Verhaftung von Ex-BND-Chef: Der tiefe Fall des August Hanning, Der Spiegel, 6 October 2026* BND genehmigte Nebentätigkeit für Hannings mutmaßlichen Komplizen, Der Spiegel, 8 October 2026* Ex-BND-Chef Hanning unterhielt Kontakte zu chinesischem General, Der Spiegel, 8 October 2026* “Wirkung einer Atombombe” — früherer BND-Vizechef entsetzt über Spionageskandal, Der Spiegel, 8 October 2026* Geheimdienstreform: Zeitenwende für Spione, Netzpolitik.org, 10 July 2026* Entwurf eines Gesetzes zur Reform des Nachrichtendienstrechts, Bundesinnenministerium (Department of the Interior of the Federal Republic of Germany), 5 July 2026The theme music for the podcast is a track called Fight or Fall by Def Lev. Find out more about the show at fab.industries/podcast — new media, new rules! Get full access to Punching Upwards at punchingupwards.substack.com/subscribe

Do we really want mob justice instead of a fair justice system? The Lindsey Clancy and Cornell Seven cases would suggest our society is going that way.Punching Upwards, Episode 56 for 4 October 2026Topics: Politics🦉 No AI Content 📢 Podcast RSS FeedCreditsThanks to Michael Mullan-Jensen, Evgeny Kuznetsov, Vlad A Gouf, Fadi Mansour, Bennet Piater, Eric and Sir Galteran for supporting this podcast financially and therefore making it possible for me to produce it!See Also* PU 50: Ignore Our Stupid New Law, Says the EU* PU 46: The Rebellion Against Flock Cameras* PU 43: The Vehicle Kill Switch Law* PU 16: Met Police to Stop Non-Crime Arrests* PU 1: The Arrest of Graham LinehanSources* Dr. K’s Take on the Linsay Clancy Case, Alok Kanojia, 12 September 2026* Cornell Students Declared Guilty, Punished by Online Mob Justice, Glenn Greenwald, 30 September 2026* NYT Publishes More Contradictory Evidence on Cornell Case, Glenn Greenwald, 2 October 2026* Mistrial declared in Lindsay Clancy murder case, after jury deadlocks, The BBC, 4 September 2026* The Lindsay Clancy Trial: A Cruel, Insensitive, and Out-of-Touch Prosecution, Serpa Law Office, 9 September 2026* Lindsay Clancy murder trial has divided US on whether she’s victim or criminal, The BBC, 5 September 2026* Lindsay Clancy holdout juror says he had no doubt she deliberately killed her children, The BBC, 18 September 2026* Lindsay Clancy begged for help before her children’s killings, mother-in-law testifies, The BBC, 18 August 2026* Judge denies defense motion to declare Lindsay Clancy not guilty of murder, The Guardian, 1 October 2026* Cornell Sexual Assault Investigation to Be Reopened, The New York Times, 28 September 2026* How a Cornell Student Went From Shame to Action, The New York Times, 1 October 2026* Editorial: Cornell Won’t, We Will, The Cornell Daily Sun, 21 September 2026* The Cornell Rape Investigation: Five Takeaways, The New York Times, 1 October 2026* D.A. in Cornell Rape Inquiry Declined to Review Additional Evidence, The New York Times, 2 October 2026* New York’s governor removes DA in Cornell rape allegations, appoints AG Letitia James to take over, The Associated Press, 2 October 2026The theme music for the podcast is a track called Fight or Fall by Def Lev. Find out more about the show at fab.industries/podcast — new media, new rules! Get full access to Punching Upwards at punchingupwards.substack.com/subscribe

If you get your news from the legacy media, you might be forgiven for thinking that the immigration crisis in Ceuta was solved months ago. That couldn’t be further from the truth, which is a disgrace.Punching Upwards, Episode 55 for 27 September 2026Topics: Politics / Immigration🦉 No AI Content 📢 Podcast RSS FeedCreditsThanks to Michael Mullan-Jensen, Evgeny Kuznetsov, Vlad A Gouf, Fadi Mansour, Bennet Piater, Eric and Sir Galteran for supporting this podcast financially and therefore making it possible for me to produce it!See Also* PU 53: The AfD Wins Bigly* PU 49: The Ceuta InvasionSources* Thousands of protesters take to the streets in Madrid over Ceuta migrant crisis, Euronews, 26 September 2026* Humanitarian crisis worsens in Ceuta as thousands remain stranded, Al Jazeera, 25 September 2026* “Migrants have TAKEN OVER!” MP infiltrates camp as government “COLLUDES” to keep migrants in Ceuta, GB News, 26 September 2026* Spain’s Ceuta residents protest as thousands of migrants remain stranded, Al Jazeera, 21 September 2026* PP and Vox join a march in Madrid that demands immediate elections, support for Ceuta, and to bring Sánchez before Justice for treason, Demócrata, 25 September 2026* EU capitals eye changes to migration pact, Euractiv, 25 September 2026* Malaga city council debates whether Ceuta incident is product of invasion or humanitarian crisis, SUR in English, 25 September 2026* Thousands of migrants charge through Ceuta, The Telegraph, 18 September 2026* Shots ring out in Ceuta as thousands of illegal migrants charge through enclave, GB News, 19 September 2026* Weber warns Morocco of “obvious consequences” over Ceuta border crisis, Euronews, 22 September 2026* Thousands of migrants return to beaches in Ceuta after new port facility runs out of space, Euronews, 19 September 2026* Brussels releases emergency funds for Ceuta invaders as the city remains occupied, Brussels Signal, 10 September 2026* Police fire shots in the air as thousands of migrants moved to new facility in Ceuta, Euronews, 18 Septmeber 2026* Terrified Spanish woman breaks down over ongoing Moroccan invasion crisis in Ceuta, News24, 11 August 2026* Thousands of protesters march in Madrid after Ceuta migration crisis, Sky News, 26 September 2026The theme music for the podcast is a track called Fight or Fall by Def Lev. Find out more about the show at fab.industries/podcast — new media, new rules! Get full access to Punching Upwards at punchingupwards.substack.com/subscribe