Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

Watch as Wiz CTO Tomer Schwartz joins the Equity podcast to break down how AI is changing vulnerability research and how startups can prepare for the next security scare.

Written by
Theresa Loconsolo
Published by
TechCrunch
Published
Length
146 words · 1 min
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
Loading the player…

The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the bugs, this is only the beginning, as AI changes how quickly novel vulnerabilities can be uncovered and exploited.  

On this episode of TechCrunch’sEquity podcast, Rebecca Bellan talks with Tomer Schwartz, CTO of Exposure Management & AppSec at Google-owned Wiz, who was part of the scramble — alongside OpenAI, research group Calif, and the PHP team — to fix the bugs. On the show, Schwartz and Bellan get into what the race looked like from the inside, how early-stage startups can build with security in mind, and why patching by hand won’t scale. 

Where this came from

This story was reported by Theresa Loconsolo and first published by TechCrunch on 28 Oct 2026. HUE Legacy Ventures did not write it.

Carried in full with attribution and a link to the original. Rights remain with the publisher, who may request removal at any time.

Read it at techcrunch.com →