Skip to content
NewA calmer, faster ZeroHour
StoryIndustrylow

Wiz CTO says critical PHP bugs still leave sites unpatched

1 source · 2 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Wiz’s CTO says two critical PHP bugs found with AI still leave some sites offline or unpatched after last week’s disclosure.

In a TechCrunch Equity interview, Tomer Schwartz, CTO of Exposure Management and AppSec at Google-owned Wiz, discussed two critical PHP bugs disclosed last week. The show ties PHP to roughly 70% of websites and says some organizations took sites offline until they could patch. Schwartz says the cleanup is unfinished, one bug sat in plain sight for more than a decade before it became exploitable, and Wiz could not have found the flaws without AI tooling that tested dozens of ideas over a weekend. He says he worked on the fix with OpenAI, research group Calif and the PHP team, and that Wiz expected leaks during coordinated disclosure. The episode also flags risk for unpatched WordPress operators and argues manual patching will not scale as AI speeds discovery and exploitation.

Key facts
  • Two critical PHP bugs were disclosed last week, according to the interview.
  • Schwartz says one bug was visible for more than a decade before becoming exploitable.
  • Some organizations took websites offline until they patched; cleanup is unfinished.
  • Wiz used custom AI tooling that tested dozens of ideas over a weekend.
  • Schwartz says he worked on the fix with OpenAI, Calif and the PHP team.
  • The show links PHP to roughly 70% of websites and flags unpatched WordPress sites.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • TechCrunchDecade-old bug, AI weekend tooling, disclosure leaks, and unfinished WordPress cleanup.
  • TechCrunchSchwartz joined OpenAI, Calif and the PHP team on the fix.
Products
PHPWordPress
Organizations
WizGoogleOpenAICalif

Coverage

oldest first · one row per article · UTC
  1. · 2d ago TechCrunch · SecurityFirst report

    Wiz CTO says PHP cleanup continues after critical bugs

    Schwartz says AI tooling found bugs that sat in PHP for more than a decade, and some sites are still unpatched.

  2. · 2d ago TechCrunch · Security

    Wiz CTO discusses PHP critical-bug cleanup on Equity podcast

    Schwartz says he joined OpenAI, Calif and the PHP team after two critical bugs forced some sites offline.