Wiz CTO 谈 PHP2Shell 漏洞与即将到来的“漏洞末日”
原标题：Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
AI 摘要
TechCrunch 的 Equity 播客邀请 Google 旗下 Wiz 的 Exposure Management & AppSec CTO Tomer Schwartz，讨论近期影响约 70% 网站的开源 PHP 语言的两个严重漏洞（PHP2Shell）。Schwartz 参与了与 OpenAI、研究机构 Calif 和 PHP 团队协作修复漏洞的行动。节目探讨了从内部视角看这场修复竞赛、早期创业公司如何以安全为先进行构建，以及为何手工打补丁无法规模化。
正文节选
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the bugs, this is only the beginning, as AI changes how quickly novel vulnerabilities can be uncovered and exploited. On this episode of TechCrunch’sEquity podcast, Rebecc