被谷歌收购的安全公司 Wiz 的首席技术官 Tomer Schwartz 近日在 TechCrunch 播客节目《Equity》中，与主持人 Rebecca Bellan 深入探讨了近期 PHP 语言出现的关键安全漏洞及其对行业的影响 1。Schwartz 指出，支撑全球约 70% 网站的 PHP 语言上周暴露出两个关键 Bug，迫使相关组织进行紧急修复甚至临时下线网站以应对风险 1。此次漏洞的披露与修复过程涉及多方协作，包括 OpenAI、研究团队 Calif 以及 PHP 官方开发团队 1。
针对当前网络安全态势，Schwartz 强调人工智能正在根本性地改变新漏洞被发现和利用的速度，他警告称这可能引发一场“漏洞末日”（vulnpocalypse）1。他认为，传统的手动修补模式已无法适应这种规模化的挑战，因此初创公司在构建产品初期就必须将安全性纳入核心考量 1。
Tomer Schwartz, the Exposure Management and AppSec Chief Technology Officer at Google-owned security firm Wiz, cautioned that artificial intelligence is fundamentally altering the speed at which new vulnerabilities are discovered and exploited 1. Speaking on TechCrunch’s Equity podcast alongside host Rebecca Bellan, Schwartz highlighted recent critical bugs in the PHP programming language as evidence of a looming "vulnpocalypse," where traditional manual patching methods fail to scale against automated threats 1.
The urgency of this shift was underscored by the discovery of two key bugs in PHP last week, which forced organizations into emergency repair cycles and resulted in some websites being taken offline 1. Given that PHP underpins approximately 70% of all websites, these incidents had widespread implications for digital infrastructure stability 1. The remediation effort involved collaboration among several major entities, including the core PHP team, OpenAI, and the research group Calif 1.
Schwartz emphasized that relying on human-led vulnerability management is no longer viable due to the sheer volume and velocity of AI-driven discoveries 1. He argued that companies, particularly startups, must integrate security considerations into their product development processes from the earliest stages rather than treating it as a reactive measure 1.
评论
还没有评论，欢迎留下第一条。