
Hosted by Anthony Ha, Kirsten Korosec, Rebecca Bellan and Sean O'Kane
Written by a model from the transcript; not yet reviewed.
Researchers recently uncovered critical security flaws in PHP, a decades-old open source programming language powering a vast majority of the web, after large AI companies and labs used LLMs to locate the vulnerabilities. This discovery triggered a race to patch the code and a wave of attempted hacks, highlighting the fragile nature of internet infrastructure. Meanwhile, corporate boundaries are continuing to shift as Tesla and SpaceX move closer toward a potential merger, while startups like Character AI face bankruptcies leading to acqui-hires by major players like Disney.
The hosts discuss the newly revealed flaws in PHP and the implications for the web.
Hosts introduce themselves and set the stage for the episode’s topics.
Explores how AI and LLMs uncovered and are potentially exploiting PHP vulnerabilities.
Panelists debate whether new AI‑based cybersecurity startups will emerge from the PHP crisis.
Discussion of Musk’s plans and the corporate dynamics behind a potential Tesla‑SpaceX merger.
Examines Disney’s move to acquire assets from the bankrupt AI startup Character AI.
Hosts analyze Otter AI’s massive funding round and its impact on the company’s product focus.
Final remarks, listener reminders, and a preview of upcoming content.
Internet Infrastructure Held Togetherinsight
The guest explains that the internet relies on open-source code and that LLMs enable agents to uncover vulnerabilities, demonstrating that digital infrastructure is fragile.
Decades-Old Vulnerability Discoveryinsight
The guest notes that the PHP security flaw was not new, but rather an undetected issue existing for decades that AI made easy to uncover.
The host highlights that Amazon operated a decoy network and observed attempts to exploit the PHP vulnerability prior to any public announcements.
LLM Brute Force Scanninginsight
A speaker explains that current LLMs are effective not because they are super-sentient, but because they can thoroughly brute force the internet for vulnerabilities.
Tesla SpaceX Merger Feasibilityinsight
The guest discusses how corporate ties between Tesla and SpaceX are collapsing together, with special committees reviewing a potential merger.
Massive Spaceport Financing Needsdata
The guest notes that building massive spaceports and orbital data centers exceeds the financial capabilities of modern venture capital environments.
“the downside risk of building so much of the internet on open source technology like PHP where things are really, when you really get down to the bone level of the internet, it is held together with glue and dreams.”
“like, it's not that it's super smart, but it's like thorough.”
“Like it can sort of just go, if there's a vulnerability somewhere, it can probably find it.”
“One is a bunch of the labs and companies like Google and OpenAI actually had people go out and find a bunch of vulnerabilities, including the one with PHP.”
The internet is having an off week, to say the least. Security researchers at OpenAI and Google-owned Wiz used AI to uncover critical flaws in PHP, the open source language behind roughly 70% of websites, including those built on WordPress, WooCommerce, and Magento. The holes date back more than a decade, and now that a fix is out, companies are scrambling to patch their systems as attackers try to exploit the them. On this episode of TechCrunch’s Equity podcast, Kirsten Korosec, Sean O’Kane, and Anthony Ha dig into why AI-powered bug hunting could make this the first of many internet-wide scares, what Elon Musk’s careful choreography says about where a Tesla-SpaceX merger is headed, and more of the week’s headlines. Listen to the full episode to hear more about: Elon Musk’s pledge to give every kid in America a SpaceX share, announced just hours after Anthropic unveiled its public benefit fund Character. AI’s bankruptcy, Disney’s deal to hire most of its staff, and Anthony’s case for rethinking what “acquihire” means OpenAI’s acquisition of Orchestra Bio and what it says about the company’s “no side quests” strategy Otter’s surprise $320 million raise from General Catalyst’s growth fund Subscribe to Equity on YouTube, Apple Podcasts, Overcast, Spotify and all the casts. You can also follow Equity on X and Threads, at @EquityPod. Chapters: 0:00 – Intro: PHP security crisis, Tesla and SpaceX, and Otter.ai's $320M raise 0:55 – TechCrunch Disrupt recap and the Elizabeth Holmes documentary 2:50 – Critical PHP vulnerabilities threaten millions of websites 8:01 – AI's role in discovering and exploiting cybersecurity flaws 13:09 – The future of AI-powered cybersecurity 17:07 – Are Tesla and SpaceX finally merging? 19:10 – Elon Musk's influence over both companies' boards 22:50 – Why a Tesla-SpaceX merger could make financial sense 25:27 – Musk's plan to give American children SpaceX shares 27:08 – Character. AI's bankruptcy and Disney's involvement 30:21 – OpenAI acquires biotech startup Orchestra Bio 33:00 – Otter.ai raises $320 million from General Catalyst 35:30 – Outro Learn more about your ad choices. Visit megaphone.fm/adchoices
6,850 words · 4 speakers
Speaker names marked are inferred from speaking time and the show’s known hosts — they are not voice-verified.
Page updated · transcript and summary are machine-generated