Wiz CTO Warns AI Will Accelerate Discovery of Long‑Hidden PHP Vulnerabilities

Tomer Schwartz, CTO of Wiz, explained that two critical bugs in PHP—responsible for about 70% of websites—were only recently discovered after a week‑long scramble involving Wiz, OpenAI, the California research group, and the PHP core team. The bugs had existed for over a decade, and AI tools helped identify and patch them quickly. Schwartz said that manual patching cannot scale as AI enables faster identification and exploitation of new vulnerabilities, and that many small‑business WordPress sites may still be unpatched. The incident illustrates how AI is reshaping the threat landscape for open‑source code.