Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

Last week, two critical bugs in PHP—the open source language powering roughly 70% of websites—forced organizations to scramble to patch systems, with some taking sites offline. Researchers warn this is only the beginning, as AI accelerates how quickly novel vulnerabilities are uncovered and exploited. In this episode of TechCrunch’s Equity podcast, Rebecca Bellan speaks with Tomer Schwartz, CTO of Exposure Management & AppSec at Google-owned Wiz, who was part of the effort—alongside OpenAI, research group Calif, and the PHP team—to fix the bugs. They discuss what the race looked like from the inside, how early-stage startups can build with security in mind, and why manual patching won’t scale.

(Source：TechCrunch)