Wiz's CTO warns of accelerating vulnerability discovery as AI transforms security threats
Two critical PHP flaws affecting 70% of websites triggered an emergency response last week, but researchers say the real challenge lies ahead as artificial intelligence speeds up the pace of exploit discovery.

The PHP vulnerability incident that dominated headlines last week continues to demand attention from organizations worldwide, even as media coverage has moved on. Two severe security gaps in the open source language that powers approximately 70% of all websites forced companies into emergency response mode, with some shutting down services entirely pending the release of patches. Specialists who identified the flaws argue that what happened represents merely an opening act, with AI poised to fundamentally alter how rapidly new vulnerabilities emerge and get weaponized.
Tomer Schwartz, CTO of Exposure Management & AppSec at Google-owned Wiz, participated in the coordinated effort to address the bugs alongside OpenAI, research group Calif, and the PHP development team. In an appearance on TechCrunch's Equity podcast, Schwartz and host Rebecca Bellan examined the incident from multiple angles: the internal dynamics of the emergency response, how emerging companies can embed security practices into their development process from the start, and the fundamental limitations of manual patching approaches as threats multiply.
The conversation is available on Equity through YouTube, Apple Podcasts, Overcast, Spotify, and other podcast platforms. Listeners can also engage with the show on X and Threads via @EquityPod.


