Two Critical PHP Bugs: Wiz CTO on AI-Driven Rise in Security Risks
Two critical vulnerabilities were found in the open source language PHP, which underpins roughly 70% of websites, forcing organizations to patch quickly. On TechCrunch's Equity podcast, Wiz CTO Tomer Schwartz discusses the response.
Two critical bugs in PHP, the open source programming language behind roughly 70% of websites, recently left organizations scrambling to fix their systems. Some took their sites offline until the vulnerabilities could be patched. The latest episode of TechCrunch's Equity podcast looks at the episode through the eyes of someone who took part in the fix.
Host Rebecca Bellan speaks with Tomer Schwartz, chief technology officer for Exposure Management and AppSec at Wiz, a company owned by Google. These areas deal with managing organizations' security exposure and securing applications. Schwartz was involved in the effort to fix the bugs alongside OpenAI, the research group Calif and the PHP team.
Why it matters
The researchers who found the bugs say this is only the beginning. In their view, artificial intelligence is changing how quickly new vulnerabilities can be discovered and exploited. For that reason, the episode also addresses why patching by hand will not scale.
What the episode covers
Schwartz and Bellan discuss what the race to fix the flaws looked like from the inside. They also talk about how early-stage startups can build their products with security in mind from the outset.
The episode is available on YouTube, Apple Podcasts, Overcast, Spotify and other podcast platforms. Equity can also be followed on X and Threads at @EquityPod.
