Wiz CTO 谈“漏洞末日”与 AI 对互联网老旧代码安全的影响
Wiz CTO 谈互联网老旧代码面临的安全危机与 AI 的影响
Google 旗下 Wiz 的 CTO Tomer Schwartz 在 TechCrunch Equity 播客中表示，支撑约 70% 网站的开源语言 PHP 上周曝出两个严重漏洞，部分站点被迫下线，而 AI 正在加快漏洞被发现和利用的速度。他参与了 Wiz 与 OpenAI、研究机构 Calif 及 PHP 团队协作修复漏洞的过程，并指出手动打补丁无法扩展。
TechCrunch：AI· Theresa Loconsolo, Rebecca Bellan·2026-10-29 02:50· 53 分钟前AI 评分54
The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO
AI 导读
TechCrunch Equity 播客邀请 Google 旗下 Wiz 的 CTO Tomer Schwartz，复盘上周 PHP 两个严重漏洞的修复过程，该语言支撑约 70% 的网站，部分站点曾被迫下线。他谈到与 OpenAI、Calif 和 PHP 团队的协作经历，认为 AI 改变了漏洞被发现和利用的速度，并解释手动打补丁为何无法扩展、初创公司如何在安全前提下构建系统。
正文 · 原文
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the bugs, this is only the beginning, as AI changes how quickly novel vulnerabilities can be uncovered and exploited.
On this episode of TechCrunch’s Equity podcast, Rebecca Bellan talks with Tomer Schwartz, CTO of Exposure Management & AppSec at Google-owned Wiz, who was part of the scramble — alongside OpenAI, research group Calif, and the PHP team — to fix the bugs. On the show, Schwartz and Bellan get into what the race looked like from the inside, how early-stage startups can build with security in mind, and why patching by hand won’t scale.
Listen to the full episode to hear more about:
- Why Tomer says Wiz couldn’t have found these bugs without AI, and how custom tooling tested dozens of ideas over a weekend.
- How a bug was able to sit in plain sight for more than a decade, and what changed to make it exploitable.
- Why leaks are almost baked into coordinated disclosure, and how Wiz planned for it.
- Who’s still unpatched and whether small business owners running WordPress sites need to worry.
Subscribe to Equity on YouTube, Apple Podcasts, Overcast, Spotify, and all the casts. You can also follow Equity on X and Threads, at @EquityPod.
Theresa Loconsolo is an audio producer at TechCrunch focusing on Equity, the network’s flagship podcast. Before joining TechCrunch in 2022, she was one of 2 producers at a four-station conglomerate where she wrote, recorded, voiced and edited content, and engineered live performances and interviews from guests like lovelytheband. Theresa is based in New Jersey and holds a bachelors degree in Communication from Monmouth University.
You can contact or verify outreach from Theresa by emailing [email protected].
Rebecca Bellan is a senior reporter at TechCrunch where she covers the business, policy, and emerging trends shaping artificial intelligence. Her work has also appeared in Forbes, Bloomberg, The Atlantic, The Daily Beast, and other publications.
You can contact or verify outreach from Rebecca by emailing [email protected] or via encrypted message at rebeccabellan.491 on Signal.
来源：TechCrunch：AI · techcrunch.com
来源：RadarAI · aihot.news