Tomer Schwartz, CTO of exposure management and app security at Google-owned Wiz, states that the recent PHP vulnerability cleanup marks only the start of a new era for internet security. Two critical bugs in the open source language, which powers roughly 70% of websites, forced organisations to scramble for fixes and take sites offline. Researchers found these flaws, but Schwartz argues that artificial intelligence will accelerate the discovery and exploitation of similar issues in the future. He participated in the emergency response alongside OpenAI and the research group Calif to patch the systems.
The episode explains why manual patching cannot scale against this growing threat. Schwartz notes that Wiz required custom tooling powered by AI to test dozens of ideas over a weekend. This approach allowed the team to find bugs that had remained hidden for over a decade. The discussion covers how leaks are almost inherent in coordinated disclosure processes and whether small business owners running WordPress sites need to worry.
* AI enabled the discovery of vulnerabilities that would have taken humans much longer to find.
* Manual security fixes are no longer sufficient for modern infrastructure.
* The speed of AI-driven exploitation will outpace traditional response times.
