Buy One Founder Summit Ticket, Get a Second for Free. Register now.
Disrupt doors open Oct. 13. Get your pass and bring someone with you at 50% off. REGISTER NOW.
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the opencrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the bugs, this is only the beginning, as AI changes how quickly novel vulnerabilities can be uncovered and exploited
On this episode of TechCrunch’sEquity podcast, Rebecca Bellan talks withTomer Schwartz, CTO of Exposure Management & AppSec at Google-owned Wiz, who was part of the scramble — alongside OpenAI, research group Calif, and the PHP team — to fix the bugs. On the show, Schwartz and Bellan get into what the race looked like from the inside, how early-stage startups can build with security in mind, and why patching by hand won’t scale.
Listen to the full episode to hear more about:
- Why Tomer says Wiz couldn’t have found these bugs without AI, and how custom tooling tested dozens of ideas over a weekend.
- How a bug was able to sit in plain sight for more than a decade, and what changed to make it exploitable.
- Why leaks are almost baked into coordinated disclosure, and how Wiz planned for it.
- Who’s still unpatched and whether small business owners running WordPress sites need to worry.
Latest Equity Episodes
- Startups
- Theresa Loconsolo
- Rebecca Bellan
3 minutes ago
- Venture
The PHP Armageddon reminds us that the internet is held together by glue and dreams
Oct 23, 2026
-
Meta and Instinct are racing to build your AI assistant. Wabi has a different idea.
- Rebecca Bellan
- Theresa Loconsolo
Oct 22, 2026
-
Startups
Physical AI is more than robots, says the Nvidia veteran now investing in it
- Theresa Loconsolo
- Dominic-Madori Davis
Oct 16, 2026
