The emergency response required a joint effort between the core PHP team, OpenAI, Calif, and security specialists from Google-owned Wiz. During a discussion on TechCrunch's Equity podcast, Wiz executive Tomer Schwartz detailed the frantic race to remediate the vulnerabilities. He stressed that early-stage startups must integrate defensive measures directly into their development lifecycles. Furthermore, Schwartz cautioned that manual patching practices can no longer scale against modern, automated security threats.
Key points
Artificial intelligence is speeding up the identification and exploitation of vulnerabili…: Artificial intelligence is speeding up the identification and exploitation of vulnerabilities, creating severe new operational risks.
Relying on manual patching processes is no longer a sustainable defensive strategy for mo…: Relying on manual patching processes is no longer a sustainable defensive strategy for modern organizations.
Early-stage startups must actively embed cybersecurity practices directly into their init…: Early-stage startups must actively embed cybersecurity practices directly into their initial software development workflows.
Sources checked by our analysis pipeline: 1
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the bugs, this is only the beginning, as AI changes how quickly novel vulnerabilities can be uncovered and exploited.
On this episode of TechCrunch’sEquity podcast, Rebecca Bellan talks with Tomer Schwartz, CTO of Exposure Management & AppSec at Google-owned Wiz, who was part of the scramble — alongside OpenAI, research group Calif, and the PHP team — to fix the bugs. On the show, Schwartz and Bellan get into what the race looked like from the inside, how early-stage startups can build with security in mind, and why patching by hand won’t scale.
Subscribe to Equity on YouTube, Apple Podcasts, Overcast, Spotify, and all the casts. You can also follow Equity on X and Threads, at @EquityPod.
An unidentified intrusion into identity management infrastructure exposed private contact details and technical profiles for roughly one-fifth of the federal department's total workforce. The compromised internal files reveal sensitive surveillance tool authorizations alongside names, phone numbers, and physical office assignments of frontline agents and cybersecurity staff. This massive release of operational data poses significant security risks for personnel across key immigration and border enforcement branche…
Citing national security concerns, the Federal Communications Commission under Chairman Brendan Carr has expanded federal trade restrictions to block entire classes of foreign-made consumer hardware. The escalating bans encompass future imports of drones, routers, power inverters, and robotic vacuums, moving beyond earlier limits on telecom infrastructure. This broad clampdown has forced international tech brands to navigate an unpredictable regulatory environment to maintain access to American consumers.
Melbourne developer Quantum DC has targeted Tungkillo, South Australia, for a hyperscale energy and computing hub to leverage existing power infrastructure. The plan faces fierce pushback from nearby communities worried that light and noise pollution will destroy pristine stargazing conditions and the local rural character. While the initiative promises construction and operational employment, residents argue the industrial footprint will harm an environment valued for its natural darkness.