S0:E61: Palo Alto Retracts Its PHP Claim — Did an AI Model Phone Home to China?

Breach Please · Oct 28, 2026 · 42m

Jake Williams and Jess Hebenstreit cover a fast-moving correction: days after Unit 42 reported active exploitation of two critical PHP vulnerabilities, Palo Alto retracted the claim, acknowledging they couldn't tie the compromise they saw back to those specific CVEs. Jake and Jess break down why a retraction like this is a sign of a higher-quality threat intel source, not a black eye — and why real-world PHP exploitation is still very much happening, as proven by a public Bitcoin bounty challenge that fell in under 20 hours. Along the way, Jake uses his post-office-box analogy to explain…