{
  "id": 16944751,
  "title": "Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’",
  "url": "https://urgent.news/2026/10/28/wizs-cto-on-php2shell-and-the-coming-vulnpocalypse",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-28T19:05:46.000Z",
  "source": {
    "name": "TechCrunch",
    "slug": "techcrunch",
    "url": "https://techcrunch.com/video/wizs-cto-on-php2shell-and-the-coming-vulnpocalypse/"
  },
  "original_language": "en",
  "account": "Even though the PHP scare has faded from your feed, the cleanup is far from over. Two critical bugs in the open source language, which powers roughly 70% of websites, left organizations scrambling to fix their systems last week. In some cases, sites were taken offline while the vulnerabilities were patched. Researchers who discovered the bugs say this is only the beginning, as advancements in artificial intelligence make it easier to uncover and exploit novel vulnerabilities quickly.\n\nRebecca Bellan spoke with Tomer Schwartz, the CTO of Exposure Management & AppSec at Google-owned Wiz, about the scramble to fix the bugs. Schwartz was part of a team that included OpenAI, the research group Calif, and the PHP team to address the issues. They discussed the race dynamics from the inside, the importance of building with security in mind for early-stage startups, and why patching by hand won't be scalable.",
  "summary": "The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the […]",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}