February 24-26, 2027
Montreal, Canada
PHP2Shell: Tales from the Front Lines
In October 2026, a pair of critical vulnerabilities in PHP, termed "PHP2Shell," were disclosed. As a PHP 8.5 Release Manager, Daniel Scherzer had a front-row seat to the announcement of the PHP2Shell vulnerabilities and the distribution of their fixes. Join him for an in-depth account of what PHP2Shell is, the discovery and remediation process, how the fixes were built and disseminated, and much much more.
Daniel Scherzer
Daniel is an open source contributor mainly focused on PHP and its ecosystem. He contributes as @DanielEScherzer on GitHub. See https://scherzer.dev/ for more.
