OpenAI says its models found critical PHP flaws affecting ~70% of websites, fixes now shipped
Kyrannio · x · 2026-10-21
OpenAI announced that researchers in its Patch the Planet initiative used OpenAI models to discover critical security flaws in PHP, the open-source language powering an estimated 70% of websites.
Over two months, OpenAI led a coalition of maintainers, researchers, and security vendors to prepare fixes before disclosure — the fix required a major change to the PHP engine. All PHP sites can now safely upgrade, plus apply vendor mitigations.
The reposter's screenshots show GPT-6.1-Sol (medium) in a CLI 'logging into my VPS and updating php', hinting the new model is already being used in server-patching workflows.
More from coding & agent
- Dev builds phrok, an MCP server that lets grokbot make real phone calls — naxmax2019 · 2026-10-22
- Simulithic (YC F26) launches AI agents that run E2E tests like real users — KlausCodes · 2026-10-22
- echudhra.com: one-line curl/node/docker commands to test if your tools trust the leaked eMudhra keys — SuB8u · 2026-10-21
- Viral meme: every AI coding tool stands on the same Terminal Bench pillar — geoffwolfe · 2026-10-21
- Vercel's durable-harness moves coding agents to the cloud with auto-resume for month-long runs — mitsuhiko · 2026-10-21
- Cohere launches Rerank 5 to push AI retrieval precision, available now in Pro and Fast tiers — calabi_and_yau · 2026-10-21