hiw3c 日报精选
TechCrunch AI 网页快照

Wiz的CTO谈PHP2Shell以及即将到来的“漏洞大爆发”事件

原文标题 · Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

虽然关于PHP的恐慌可能已经消退,但清理工作远未结束。上周,这种开源编程语言中存在的两个严重漏洞导致许多网站面临系统修复的紧急需求,一些网站甚至不得不暂时关闭,直到这些漏洞得到修复为止。据发现这些漏洞的研究人员称……

来源:TechCrunch AI · techcrunch.com

正文为英文,可一键机器翻译(仅首次需要等待)

Buy One Founder Summit Ticket, Get a Second for Free. Register now.

Disrupt doors open Oct. 13. Get your pass and bring someone with you at 50% off. REGISTER NOW.

Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems , with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the bugs, this is only the beginning, as AI changes how quickly novel vulnerabilities can be uncovered and exploited.

On this episode of TechCrunch’s Equity podcast, Rebecca Bellan talks with Tomer Schwartz , CTO of Exposure Management & AppSec at Google-owned Wiz, who was part of the scramble — alongside OpenAI, research group Calif, and the PHP team — to fix the bugs. On the show, Schwartz and Bellan get into what the race looked like from the inside, how early-stage startups can build with security in mind, and why patching by hand won’t scale.

Subscribe to Equity on YouTube , Apple Podcasts , Overcast , Spotify , and all the casts. You can also follow Equity on X and Threads , at @EquityPod.

Theresa Loconsolo is an audio producer at TechCrunch focusing on Equity, the network’s flagship podcast. Before joining TechCrunch in 2022, she was one of 2 producers at a four-station conglomerate where she wrote, recorded, voiced and edited content, and engineered live performances and interviews from guests like lovelytheband. Theresa is based in New Jersey and holds a bachelors degree in Communication from Monmouth University. You can contact or verify outreach from Theresa by emailing [email protected] . View Bio November 4 Boston Buy One Pass, Get a Second Free Cover more ground at TechCrunch’s ultimate founder bootcamp of the year by bringing your co-founder or partner for free Book before the BOGO deal expires

Most Popular

VCs will make billions on Anthropic’s IPO, but Amazon is set to make much (much) more Marina Temkin

Billionaire Palmer Luckey isn’t leaving California over the wealth tax Julie Bort

Microsoft offers buyouts to around 60,000 employees Aisha Malik

Grok releases the first seven minutes of its AI-generated ‘Odyssey’ Anthony Ha

AI delivers ‘zero financial payoff’ to most companies, Apollo economist says Anthony Ha

The AI graveyard: a running list of projects and startups that didn’t make it Lauren Forristal

Hottest toy for Christmas? Nvidia CEO plays with adorable Microduck robots, 20,000 sell Julie Bort

Newsletters

Subscribe for the industry’s biggest tech news

Related

AI South Korea’s financial industry hit by fresh wave of cyberattacks Kate Park

Security Bank of America kindly asks that you don’t share your banking password with your AI assistant Zack Whittaker

Enterprise Amazon CTO Werner Vogels on fighting misinformation, tech addiction, and small nuclear reactors Frederic Lardinois