Wiz CTO says PHP cleanup continues after critical bugs
Original title: The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO
Schwartz says AI tooling found bugs that sat in PHP for more than a decade, and some sites are still unpatched.
A TechCrunch Equity episode with Wiz CTO Tomer Schwartz revisits two critical PHP bugs from last week in the language the show ties to roughly 70% of websites. Some organizations took sites offline to patch, and Schwartz says the cleanup is unfinished. He says Wiz could not have found the bugs without AI, using custom tooling that tested dozens of ideas over a weekend. The discussion also covers a decade-old bug, leaks during coordinated disclosure, and concern for unpatched WordPress operators.
Unconfirmed: No CVE identifiers, fixed versions, or confirmed exploitation are stated.
- Schwartz says one bug sat in plain sight for more than a decade before becoming exploitable.
- He says Wiz planned for leaks, which he calls almost built into coordinated disclosure.
- The episode asks whether small businesses running WordPress sites still need to worry.
Impact: Critical PHP bugs; some sites taken offline until patched
| Product | Affected |
|---|---|
| PHP | — |
From the original article
2 min read at techcrunch.com
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the […]
By Theresa Loconsolo, Rebecca Bellan · techcrunch.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.