Wiz CTO warns AI is accelerating vulnerability discovery and PHP flaw fixes

On 29 October 2026, Tomer Schwartz, CTO of Exposure Management & AppSec at Google-owned Wiz, warned that AI is speeding up the discovery and exploitation of new vulnerabilities, and that two critical PHP flaws are only the beginning. According to TechCrunch, the two flaws affect the open-source language underpinning about 70% of websites; Wiz used AI and custom tools to test dozens of ideas over a weekend and worked with OpenAI, research team Calif and the PHP team on fixes. Schwartz used the term "Vulnpocalypse" to describe the impact of AI-accelerated vulnerability discovery on the internet's ageing code. The same day, Schwartz recounted last week's emergency fixes for two severe PHP vulnerabilities on the TechCrunch Equity podcast, saying Wiz took part alongside OpenAI, research team Calif and the PHP team, and noting that AI is speeding up the discovery and exploitation of new vulnerabilities while manual patching cannot scale. The reports did not disclose the specific vulnerability identifiers, details of the impact or when the fixes were completed.

Written by AI from the reports · updated 1 h ago

Not enough continuous observations yet to draw a trend.