Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. Accord…
Theresa Loconsolo
12:05 PM PDT · October 28, 2026
30 min
Loading the player…
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems , with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the bugs, this is only the beginning, as AI changes how quickly novel vulnerabilities can be uncovered and exploited.
On this episode of TechCrunch’s Equity podcast, Rebecca Bellan talks with Tomer Schwartz , CTO of Exposure Management & AppSec at Google-owned Wiz, who was part of the scramble — alongside OpenAI, research group Calif, and the PHP team — to fix the bugs. On the show, Schwartz and Bellan get into what the race looked like from the inside, how early-stage startups can build with security in mind, and why patching by hand won’t scale.
Subscribe to Equity on YouTube , Apple Podcasts , Overcast , Spotify , and all the casts. You can also follow Equity on X and Threads , at @EquityPod.
Topics
AI , CTO , cybersecurity , Equity Video , php , Security , Startups , wiz
Theresa Loconsolo
Audio Producer
Theresa Loconsolo is an audio producer at TechCrunch focusing on Equity, the network’s flagship podcast. Before joining TechCrunch in 2022, she was one of 2 producers at a four-station conglomerate where she wrote, recorded, voiced and edited content, and engineered live performances and interviews from guests like lovelytheband. Theresa is based in New Jersey and holds a bachelors degree in Communication from Monmouth University.
You can contact or verify outreach from Theresa by emailing [email protected] .
View Bio
November 4
Boston
Buy One Pass, Get a Second Free
Cover more ground at TechCrunch’s ultimate founder bootcamp of the year by bringing your co-founder or partner for free
Book before the BOGO deal expires
Register Now
Most Popular
Billionaire Palmer Luckey isn’t leaving California over the wealth tax
Julie Bort
Microsoft offers buyouts to around 60,000 employees
Aisha Malik
Grok releases the first seven minutes of its AI-generated ‘Odyssey’
Anthony Ha
The AI graveyard: a running list of projects and startups that didn’t make it
Lauren Forristal
Hottest toy for Christmas? Nvidia CEO plays with adorable Microduck robots, 20,000 sell
Julie Bort
Warhound raises $200M to engineer war dogs and arm them with Anduril gear
Dominic-Madori Davis
Uber puts all 30,000 employees on ChatGPT Work
Lucas Ropek
Newsletters
See More
Subscribe for the industry’s biggest tech news
Related
AI
South Korea’s financial industry hit by fresh wave of cyberattacks
Kate Park
11 hours ago
Security
US government says hackers are now exploiting critical PHP web bugs
Zack Whittaker
2 days ago
Security
Japan internet giant GMO says hackers posted stolen customer data
Kate Park
2 days ago
本文内容由 ai007 从公开渠道聚合,版权归原作者所有。若原文已删除或变更, 以原文站为准;本站存档仅为便于查阅而保留。