PHP maintainers slammed for easter-egg vuln disclosure as AI agents weaponize exploits in under an hour

MarcJSchmidt · x · 2026-10-21

Developer Marc J. Schmidt publicly slammed PHP maintainers for an "easter egg" style vulnerability disclosure, demanding they publish the fix immediately. His argument: in the age of AI agents, exploits are now found and weaponized in under an hour, so giving the world a head start to hack everyone is no longer acceptable. The episode highlights how AI-accelerated exploitation is straining traditional responsible-disclosure timelines.

Original post →

More from Safety

Safety channel →