OpenAI says its models found critical PHP flaws affecting ~70% of all websites
OpenAI · x · 2026-10-21
OpenAI announced that researchers in its Patch the Planet initiative, using OpenAI models, discovered critical security flaws in PHP, the open-source language powering an estimated 70% of websites.
- Over two months, OpenAI led a coalition of maintainers, researchers, and security vendors to prepare fixes before disclosure; the fix required a major change to the PHP engine
- PHP sites can now safely upgrade, with additional mitigations from security vendors
- OpenAI calls it one of the most impactful vulnerabilities in recent memory and a sign that AI can now find security bugs with internet-scale impact — an example of its 'Defender's Window'
More from Models
- Grok Bot word-of-mouth surges: builders and first-time users say 'it just works' — XFreeze · 2026-10-21
- Anthropic releases Claude Sonnet 5.5: Terminal-Bench jumps from 10.3% to 70.6%, tasks up to 30% cheaper — Aiden_Tech_Ai · 2026-10-21
- Google says its Gemini 4 Argon AI model helped find and mitigate critical PHP flaws — RSync25 · 2026-10-21
- Polymarket gives just 17% odds next Gemini Argon model ships by year-end — Polymarket · 2026-10-21
- Fable 5.5 should be Fable 6, says insider claiming model was ready since February — iruletheworldmo · 2026-10-21
- Security researcher: benchmark-saturated open models still fail real PHP exploit work — banteg · 2026-10-21