Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

Recent critical flaws in PHP have forced many organisations to take websites offline while engineers patch the code. Two bugs affecting roughly…

By Vane October 28, 2026 1 min read
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

Recent critical flaws in PHP have forced many organisations to take websites offline while engineers patch the code. Two bugs affecting roughly 70% of the web exposed systems to immediate risk, prompting a frantic response from developers and security teams. Tomer Schwartz, CTO of Wiz, explained that this incident was only the beginning of a wider trend where artificial intelligence accelerates the discovery and exploitation of new weaknesses.

Manual patching cannot keep pace with the speed at which AI-driven research uncovers vulnerabilities. Early-stage startups must now design security into their products from the start rather than treating it as an afterthought. The industry faces a shift where novel threats appear faster than traditional remediation cycles can handle them.

  • Manual patching processes will not scale against AI-accelerated discovery
  • Security must be embedded in early product design for startups
  • Wiz collaborated with OpenAI and Calif to help resolve the recent PHP issues
Scroll to Top