wiz

On TechCrunch's Equity podcast, Wiz CTO Tomer Schwartz discusses the critical PHP bugs that nearly broke the internet and warns of an incoming 'Vulnpocalypse' as AI accelerates the discovery and exploitation of vulnerabilities in aging open-source code.

Wiz disclosed PHP2Shell, two critical decade-old PHP vulnerabilities that researchers turned into working exploits in about a week with help from Gemini and GPT models, prompting emergency patching and raising questions about AI-driven exploitation of legacy code.

Wiz Research 发现了 PHP 核心中一系列严重的内存安全漏洞，包括未经认证的远程代码执行，影响过去十年发布的几乎所有 PHP 版本（占全球 70% 网站），并借助前沿 AI 模型构建了复杂的利用链，促使 PHP 于 2026 年 10 月 21 日发布补丁。

Wiz introduces a closed-loop automated defense system using AI (Gemini) for deep scanning and CodeMender for automated patching, integrated with its cloud security platform used by over 50% of Fortune 100 companies.

Wiz announces an integration with Anthropic's Compliance API, bringing visibility into Claude Enterprise usage, permissions, projects, and datasets into the Wiz Security Graph for security and compliance teams.

Wiz researchers conducted shadow A/B testing of Gemini 4 in real-world systems, where it detected more than twice as many vulnerabilities as other baseline models while consuming fewer tokens; in the "Hack for Good" project with Google DeepMind, Gemini 4 traced a path from bypassing public file download restrictions to obtaining the master key and escalating privileges to administrator, helping fix high-risk vulnerabilities on government, hospital, and critical infrastructure websites.