World Congress 2026 North America • Sep 24, 2026 • Session details

Know Your Enemies: Live Exploit of a PHP Engine Security Breach

Alexandre Daubois

Did you know a single null byte can compromise millions of systems? Watch a live PHP engine exploit to expose the hidden vulnerabilities lurking in your foundational infrastructure.

Starting at 0:02 · Watch from the beginning

Know Your Enemies: Live Exploit of a PHP Engine Security Breach thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

2:40 min

Examining real-world zero-day exploits in enterprise applications

Sonya Moisset · World Congress 2023

2:13 min

Understanding software vulnerabilities and prominent exploits

Mohammad-Ali A'râbi

Mohammad-Ali A'râbi · World Congress 2026 Europe

2:40 min

Identifying command injection flaws in developer infrastructures

Vandana Verma Sehgal · LIVE

4:26 min

Addressing unpatched cross-site scripting vulnerabilities in parsers

Vandana Verma Sehgal · LIVE

1:19 min

Real-world impact of remote code execution vulnerabilities

Alexander Pirker · World Congress 2022

2:55 min

Identifying common and emerging application injection attack vectors

Bozidar Spirovski

Bozidar Spirovski +1 · Coffee With Developers

More from World Congress 2026 North America

2026 in LLMs (so far) thumbnail

2026 in LLMs (so far)

Simon Willison · Datasette /Django

Running Operations Without Humans in the Loop thumbnail

Running Operations Without Humans in the Loop

Edward Aryee +4

Beyond the Code: Human-AI Synergies in Product Development thumbnail

Beyond the Code: Human-AI Synergies in Product Development

Ajita Kanchivakam Ananth · Google

Honey, look! I vibe-coded an OS! thumbnail

Honey, look! I vibe-coded an OS!

Ian Smith · LYOS

The Productivity Illusion: What AI Really Changed for Developers thumbnail

The Productivity Illusion: What AI Really Changed for Developers

Fatih Kadir Akın · WordPress/Automattic

Your Evals Passed. Your Agent Just Emptied a Database. thumbnail

Your Evals Passed. Your Agent Just Emptied a Database.

Tejas Pravinbhai Patel · Amazon

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

What I Got Wrong Shipping an MCP Server for Live Infrastructure

Pritesh Kiri

Harness

Developer Relations Engineer

How We Cut Our API's p99 Latency from Minutes to Under a Second

Deepak Agrawal

Atlassian

Principal Software Engineer

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

Hadar Geva

Myop

CTO & Co-founder

Your AI Wrote the Code. Who Vouches for It?

Siddharth Joshi

GitHub

Senior Customer Success Architect

Related videos

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

LIVE · Jan 2022

101 Typical Security Pitfalls thumbnail

101 Typical Security Pitfalls

Alexander Pirker

World Congress · 2022

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor thumbnail

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor

Feross Aboukhadijeh

Coffee With Developers · Apr 2024

Vulnerable VS Code extensions are now at your front door thumbnail

Vulnerable VS Code extensions are now at your front door

Raul Onitza-Klugman +1

JS Congress · 2021

Walking into the era of Supply Chain Risks thumbnail

Walking into the era of Supply Chain Risks

Vandana Verma

LIVE · Apr 2022

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski thumbnail

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski +1

Coffee With Developers · Mar 2026

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

about 2 years ago

Dev Digest 138 - Are you secure about this?

HS

Harman Singh

11 Best Practices For PHP Security

PHP is one of the most popular programming languages in use today. It is used by millions of websites, including some of the biggest names on the internet. While PHP is a very powerful language, it...

over 4 years ago

11 Best Practices For PHP Security

From learning to earning

Jobs that call for the skills explored in this talk.

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Cyber Defense Specialist

Raiffeisen Bank International AG

€47k Mitre Att&ck Cyber Warfare Cyber Security

about 1 month ago

Cyber Defense & Incident Response

Delivery Hero SE

Zaragoza, Spain

Remote Golang Cybercrime Security Log

about 1 month ago

Cyber Defense & Incident Response

Delivery Hero SE

Remote Golang Cybercrime Security Log