Wiz CTO details response to critical PHP vulnerabilities in Equity podcast interview
On TechCrunch's Equity podcast, Wiz CTO Tomer Schwartz discussed two critical bugs recently discovered in PHP, the open source language powering roughly 70% of websites. Schwartz described working alongside OpenAI, research group Calif, and the PHP team to address the flaws, which forced some organizations to take sites offline until patches were applied.
GoKawiil's interpretation of the reporting above, not reported fact.
Schwartz argues AI is accelerating both the discovery and exploitation of software vulnerabilities, suggesting defenders face a faster-moving threat landscape than manual patching processes can handle. His comments imply that early-stage companies may need to bake security into development from the start rather than treating it as an afterthought, though this remains his stated view rather than a documented industry shift.
- Two critical PHP bugs prompted an emergency multi-party response involving Wiz, OpenAI, Calif, and the PHP team.
- Some organizations took their websites offline to patch the flaws before resuming operations.
- Wiz's CTO warns AI is speeding up vulnerability discovery and exploitation, calling manual patching unsustainable.
Source: techcrunch.com — Theresa Loconsolo, 2026-10-28
Published there as: “Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.