OpenAI Models Found Critical PHP Flaws Affecting ~70% of Websites
_mbdr_ · x · 2026-10-22
OpenAI announced that its models, as part of the "Patch the Planet" initiative, helped researchers discover critical security flaws in PHP, the open-source language powering an estimated 70% of websites.
- Over two months, OpenAI led a coalition of maintainers, researchers, and security vendors to prepare fixes before disclosure
- The fix was intricate, requiring a major change to the PHP engine
- All PHP sites can now safely upgrade, plus apply vendor mitigations
Ethan Mollick adds that companies are struggling with patch velocity as AI defenses find issues before other AIs attack — and consumers will now get the same frequent-and-fast update experience.
Related event: OpenAI Model Helps Uncover Critical PHP Flaws Affecting ~70% of Websites(47 posts)→
More from AGI Musings
- Director says AI cut his film's budget from $80M to $1.5M, but distribution remains the bottleneck — DavidmComfort · 2026-10-22
- Lowering exploration costs grows the project pie; AI's gains come from new work, not cheaper old work — YogeshMalik · 2026-10-22
- tenobrus: even frontier labs with unlimited budgets can't secure their systems against their own models — AaronBergman18 · 2026-10-22
- Libertarian Lens on AI Agents: Instructed Agents and Aggression — AaronBergman18 · 2026-10-22
- AI safety debate: should frontier models be more liberal, or forced to carry liability insurance? — AaronBergman18 · 2026-10-22
- François Fleuret: consciousness debates upgrade pure speculation into arguments — francoisfleuret · 2026-10-22