News

Wiz

News about Wiz: events, facts and developments on tafs uz.

2 stories

Wiz on PHP2Shell: two critical PHP vulnerabilities and the 'vulnpocalypse'

In an episode of the Equity podcast, TechCrunch spoke with Wiz CTO Tomer Schwartz about two critical vulnerabilities in PHP that forced organizations to urgently patch their systems, with some taking websites offline. According to researchers' estimates, PHP powers about 70% of websites, and this is only the beginning: AI is accelerating the discovery and exploitation of new vulnerabilities.

2 min read

AI found two critical vulnerabilities in PHP: governments around the world are taking websites offline

Two vulnerabilities in the PHP language, rated 9.2 out of 10, went unnoticed for more than a decade and were discovered using AI models from OpenAI and Google. After information about the bugs leaked a day before the patches were released, governments in Europe, Japan and Australia temporarily took government websites offline, while the NSA and CERT-EU urged organizations to take systems off the network if updating was not possible. Two vulnerabilities in the PHP language, rated 9.2 out of 10, went unnoticed for more than a decade and were discovered using AI models from OpenAI and Google. After information about the bugs leaked a day before the patches were released, governments in Europe, Japan and Australia temporarily took government websites offline, while the NSA and CERT-EU urged organisations to take systems off the network if updating was not possible.

4 min read