Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the bugs, this is only the beginning, as AI changes how quickly novel vulnerabilities can be uncovered and exploited.
On this episode of TechCrunch’sEquity podcast, Rebecca Bellan talks with Tomer Schwartz, CTO of Exposure Management & AppSec at Google-owned Wiz, who was part of the scramble — alongside OpenAI, research group Calif, and the PHP team — to fix the bugs. On the show, Schwartz and Bellan get into what the race looked like from the inside, how early-stage startups can build with security in mind, and why patching by hand won’t scale.
Subscribe to Equity on YouTube, Apple Podcasts, Overcast, Spotify, and all the casts. You can also follow Equity on X and Threads, at @EquityPod.
Theresa Loconsolo is an audio producer at TechCrunch focusing on Equity, the network’s flagship podcast. Before joining TechCrunch in 2022, she was one of 2 producers at a four-station conglomerate where she wrote, recorded, voiced and edited content, and engineered live performances and interviews from guests like lovelytheband. Theresa is based in New Jersey and holds a bachelors degree in Communication from Monmouth University.
You can contact or verify outreach from Theresa by emailing [email protected].
Most Popular
Newsletters
Subscribe for the industry’s biggest tech news
Related
Comments 0
Leave a Reply
Your email address will not be published. Required fields are marked *
Technology
Explore All
This Is What the GOP’s Final Midterms Push Looks Like
Republicans are spending their time and money on Senate races in historically red states—a sign they’re more nervous than ever as Election Day looms.
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
1 hour ago
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
1 hour ago
Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
1 hour agoAnthropic just launched tools to show companies what their AI spending is buying
2 hours agoWhats New
View All
This Is What the GOP’s Final Midterms Push Looks Like
Israel's election deadlock is a sign of the country's deep divisions
What’s next for Brazil’s Flavio Bolsonaro after election defeat?
Alfonso Cuaron’s Apple TV Cult Series ‘Ascension’ Adds Amanda Plummer, Christopher Chung, T’Nia Miller
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
Skydance TV Co-Chair George Cheeks Reveals Executive Structure Following Paramount-Warner Bros. Merger
UN votes to condemn embargo of Cuba despite US lobbying push
Dem AG’s ‘too many golf courses’ remark goes viral as critics tee off
Director Gregory Nava Remembers Dolores Huerta, the Civil Rights Icon Who Introduced Him to His Wife and Trusted Them With Her Life Story