Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the […]
Even though the PHP scare has faded from your feed, the cleanup is far from over. Two critical bugs in the open source language, which powers roughly 70% of websites, left organizations scrambling to fix their systems last week. In some cases, sites were taken offline while the vulnerabilities were patched. Researchers who discovered the bugs say this is only the beginning, as advancements in artificial intelligence make it easier to uncover and exploit novel vulnerabilities quickly.
Rebecca Bellan spoke with Tomer Schwartz, the CTO of Exposure Management & AppSec at Google-owned Wiz, about the scramble to fix the bugs. Schwartz was part of a team that included OpenAI, the research group Calif, and the PHP team to address the issues. They discussed the race dynamics from the inside, the importance of building with security in mind for early-stage startups, and why patching by hand won't be scalable.
Written by urgent.news from TechCrunch's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
