Surprise: The Google Xreal glasses debut at a Meta-beating $1,099Apple’s M6 MacBook Pro isn’t very ‘exciting’ at allSamsung’s Switch 2-ready MicroSD Express card is on sale for less than $50iOS 27: What’s new, what’s in the latest beta and what’s coming nextiOS 27.2 is out now with surprise Siri AI enhancementsGroundhog Day for AI agents: Prompt caching patterns for using OpenAI models on Amazon BedrockSurprise: The Google Xreal glasses debut at a Meta-beating $1,099Apple’s M6 MacBook Pro isn’t very ‘exciting’ at allSamsung’s Switch 2-ready MicroSD Express card is on sale for less than $50iOS 27: What’s new, what’s in the latest beta and what’s coming nextiOS 27.2 is out now with surprise Siri AI enhancementsGroundhog Day for AI agents: Prompt caching patterns for using OpenAI models on Amazon Bedrock
↓ Pull down to refresh stories
Courses Write Login VIVietnamese Store

Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems , with some taking sites offline until the vulnerabilities could be patched.

The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems , with some taking sites offline until the vulnerabilities could be patched. The useful part sits in the context, the practical impact, and what readers can use to decide the next step.

Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems , with some taking sites offline until the vulnerabilities could be patched.

What happened

According to researchers who found the bugs, this is only the beginning, as AI changes how quickly novel vulnerabilities can be uncovered and exploited.

Where the sources line up

On this episode of TechCrunch’s Equity podcast, Rebecca Bellan talks with Tomer Schwartz , CTO of Exposure Management & AppSec at Google-owned Wiz, who was part of the scramble — alongside OpenAI, research group Calif, and the PHP team — to fix the bugs. On the show, Schwartz and Bellan get into what the race looked like from the inside, how early-stage startups can build with security in mind, and why patching by hand won’t scale.

Practical impact for readers

Subscribe to Equity on YouTube , Apple Podcasts , Overcast , Spotify , and all the casts. You can also follow Equity on X and Threads , at @EquityPod.

Who should pay attention now

Theresa Loconsolo is an audio producer at TechCrunch focusing on Equity, the network’s flagship podcast. Before joining TechCrunch in 2022, she was one of 2 producers at a four-station conglomerate where she wrote, recorded, voiced and edited content, and engineered live performances and interviews from guests like lovelytheband. Theresa is based in New Jersey and holds a bachelors degree in Communication from Monmouth University. You can contact or verify outreach from Theresa by emailing [email protected] . View Bio November 4 Boston Buy One Pass, Get a Second Free Cover more ground at TechCrunch’s ultimate founder bootcamp of the year by bringing your co-founder or partner for free Book before the BOGO deal expires.

What is still unclear

Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents Zack Whittaker.

Source notes

Related stories

Internet & Business TechSurprise: The Google Xreal glasses debut at a Meta-beating $1,099Internet & Business TechMeta’s Muse Spark Open now available in Amazon SageMaker JumpStartInternet & Business TechMeta’s Generative Ads Model (GEM): Scaling the Central Model and Compute Engine for Frontier Ads AI