The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the bugs, this is only the beginning, as AI changes how quickly novel vulnerabilities can be uncovered and exploited. <\/p>\n
On this episode of TechCrunch\u2019s Equity podcast, Rebecca Bellan talks with Tomer Schwartz, CTO of Exposure Management & AppSec at Google-owned Wiz, who was part of the scramble \u2014 alongside OpenAI, research group Calif, and the PHP team \u2014 to fix the bugs. On the show, Schwartz and Bellan get into what the race looked like from the inside, how early-stage startups can build with security in mind, and why patching by hand won\u2019t scale. <\/p>\n
Subscribe to Equity on YouTube, Apple Podcasts, Overcast, Spotify, and all the casts. You can also follow Equity on X and Threads, at @EquityPod. <\/p>\n
Chapters:<\/p>\n
00:00 Intro<\/p>\n
1:50 PHP2Shell explained<\/p>\n
2:53 The patch scramble and how the vulnerability leaked<\/p>\n
6:05 How AI helped Wiz uncover critical bugs<\/p>\n
9:17 Which AI models are best at finding vulnerabilities?<\/p>\n
12:10 The flaws in coordinated disclosure<\/p>\n
15:12 Why some companies got an early heads-up<\/p>\n
18:56 Why 12-year-old bugs are suddenly exploitable<\/p>\n
22:00 Who’s still vulnerable and what companies should do now<\/p>\n
24:16 The ‘vulnpocalypse’ and preparing for a future of constant security crises<\/p>\n
27:13 From cybersecurity startups to Wiz and ServiceNow<\/p>\n
29:42 Outro<\/p>\n","protected":false},"excerpt":{"rendered":"
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical<\/p>\n","protected":false},"author":1,"featured_media":13433,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[5],"tags":[],"class_list":["post-13424","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-science-technology"],"_links":{"self":[{"href":"https:\/\/nicheblog.top\/tech\/wp-json\/wp\/v2\/posts\/13424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nicheblog.top\/tech\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nicheblog.top\/tech\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nicheblog.top\/tech\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nicheblog.top\/tech\/wp-json\/wp\/v2\/comments?post=13424"}],"version-history":[{"count":0,"href":"https:\/\/nicheblog.top\/tech\/wp-json\/wp\/v2\/posts\/13424\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nicheblog.top\/tech\/wp-json\/wp\/v2\/media\/13433"}],"wp:attachment":[{"href":"https:\/\/nicheblog.top\/tech\/wp-json\/wp\/v2\/media?parent=13424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nicheblog.top\/tech\/wp-json\/wp\/v2\/categories?post=13424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nicheblog.top\/tech\/wp-json\/wp\/v2\/tags?post=13424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}