Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

Two critical bugs in PHP left organizations scrambling to fix their systems, with some taking sites offline until the patches were applied. Researchers warn that AI could accelerate the discovery and exploitation of novel vulnerabilities, leading to a 'vulnpocalypse'. Wiz's CTO Tomer Schwartz discussed the incident on a podcast, highlighting the challenges of patching by hand and the importance of building security into early-stage startups. The PHP language powers around 70% of websites, making the bugs a significant concern for many organizations. Schwartz and others worked to fix the bugs alongside the PHP team and other researchers. The incident serves as a reminder that the cleanup efforts are far from over, with more vulnerabilities likely to be discovered and exploited in the future.