PHP UK

Know Your Enemies: Live Exploit of a PHP Engine Security Breach - Alexandre Daubois

44:30 · 20 Feb 2026 · YouTube

About this talk

This talk explores the foundations of programming languages, specifically focusing on the Zend Engine in PHP, which is essential for running millions of applications. The speaker discusses the implications of core vulnerabilities, highlighting real-life cases of security breaches, including a recent vulnerability and a backdoor that was included in a release candidate, both allowing potential remote code execution. The session illustrates how these issues could be exploited and shares valuable lessons for developers. Additionally, live, local demos of the exploits provide practical insights into the risks involved in PHP development.