OpenAI disclosed that its GPT‑5.6 Sol model identified two critical vulnerabilities in the PHP programming language over the last two months, marking one of the most impactful security findings in recent memory (OpenAI).
The flaws were independently confirmed by security firm Wiz, which also reported them to the PHP maintainers, enabling a rapid coordinated response that included contributions from Cloudflare and other partners.
PHP’s core team led the development and release of patches, while OpenAI provided a Codex skill that checks installed PHP versions to help operators determine whether they are affected and which updates are required.
The Patch the Planet initiative, a joint effort between OpenAI and Trail of Bits, supplied technical expertise, model access and coordination support to accelerate the remediation process across the open‑source ecosystem (Trail of Bits).
OpenAI announced a $1 billion subsidy for Daybreak access aimed at frontline defenders with limited resources, emphasizing the need for broader adoption of AI‑assisted security tools.
Federal agencies are being urged to prioritize the PHP updates under CISA’s Binding Operational Directive 26‑04, which mandates risk‑based patching for critical software used in government systems (Cybersecurity and Infrastructure Security Agency CISA).
Developers and security teams should run the provided version‑checker, apply the new PHP releases, and follow guidance from their hosting providers to mitigate any remaining exposure while the community monitors for related exploits.
The collaboration shows that AI‑driven vulnerability discovery can outpace attackers, giving defenders a narrow window to deploy mitigations before exploits surface. However, the speed of AI‑generated findings also raises concerns about the capacity of open‑source maintainers to keep up, suggesting that structured initiatives like Patch the Planet may become essential for future software security.
Spotted an error? See our corrections policy or email editorial@lordofclaude.com.
Discussion & Comments (0)
Join the conversation