NEWS · CODING · #2748
Wiz CTO says AI helped find critical PHP bugs, raising security concerns
Two critical vulnerabilities in PHP — the language powering roughly 70% of websites — prompted coordinated fixes; Wiz CTO Tomer Schwartz said Wiz relied on AI-powered tooling to discover the bugs and worked alongside OpenAI, Calif, and the PHP team during the scramble. The episode warns that AI is speeding discovery and exploitability of novel vulnerabilities and that manual patching processes won’t scale.
KEY POINTS
- Two critical vulnerabilities in PHP — the language powering roughly 70% of websites — prompted coordinated fixes; Wiz CTO Tomer Schwartz said Wiz relied on AI-powered tooling to discover the bugs and worked alongside OpenAI, Calif, and the PHP team during the scramble.
- The episode warns that AI is speeding discovery and exploitability of novel vulnerabilities and that manual patching processes won’t scale.
- Because AI-driven tooling is accelerating discovery and exploitation of vulnerabilities in widely used, aging codebases, creating urgent need for scalable security and patching practices.
WHY IT MATTERS
Because AI-driven tooling is accelerating discovery and exploitation of vulnerabilities in widely used, aging codebases, creating urgent need for scalable security and patching practices.