Latest / AGI Dreams – Open, Uncensored, & Local - AI News Digest
AGI Dreams Podcast – October 22, 2026
The PHP Megabug: Who Actually Has a Shell
In this episode:
The PHP Megabug: Who Actually Has a Shell — Critical PHP vulnerabilities rated up to CVSS 9.2 enable unauthenticated remote code execution on WordPress, Drupal, and Joomla, but public proof-of-concepts only work against lab setups. Trail of Bits claims a private working exploit against unmodified MediaWiki, while thousands of AI-generated GitHub PoCs share the same planted-LFI flaw.
LiteLLM's Second Fall and Railway's Rotated Secrets — Attackers hijacked LiteLLM's signed release pipeline using stolen developer credentials…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.