Wiz CTO Sounds Alarm on PHP2Shell Vulnerabilities as Vulnpocalypse Looms
· Technology · TechCrunch
Researchers disclosed two critical zero-day bugs in PHP, the open-source language powering roughly 70% of websites, last week prompting urgent patching efforts. Tomer Schwartz, CTO of Exposure Management & AppSec at Google-owned Wiz, appeared on TechCrunch's Equity podcast discussing the race to fix the vulnerabilities alongside OpenAI, research group Calif, and the PHP development team. Schwartz warned that manual patching will not scale as AI accelerates the discovery of novel vulnerabilities. The PHP scare, while fading from social feeds, leaves organizations scrambling to secure systems some taking sites offline during the fix process.
Why it matters
Developers and organizations running PHP-dependent websites face immediate risk of exploitation as the vulnerabilities allow unauthorized access, with manual patching proving insufficient against AI-accelerated threat discovery.
Read the original report — TechCrunch
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.