The PHP Security Crisis

The PHP scare may have faded from public attention, but the cleanup is far from over. Recent critical bugs in the open-source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. Researchers note this is only the beginning, as artificial intelligence changes how quickly novel vulnerabilities can be uncovered and exploited.

AI and the Future of Patching

Tomer Schwartz, CTO of Exposure Management & AppSec at Google-owned Wiz, discussed what the race to fix the bugs looked like from the inside, how early-stage startups can build with security in mind, and why patching by hand will not scale.