OpenAI's Patch the Planet and Wiz independently uncover PHP2Shell flaw affecting 70% of the web
zacharynado · x · 2026-10-23
- Latent.Space's AINews reports that OpenAI's "Patch the Planet" program and Wiz independently discovered "PHP2Shell" critical vulnerabilities in core PHP, affecting roughly 70% of the web.
- Researcher Ryan Austin found the flaw in August 2026 using GPT-5.6 Sol; Wiz (recently acquired by Google Cloud) found it separately using Gemini 4 Argon, GPT-5.6 Sol and its own Wiz Atlas tool, followed by about two months of coordinated response.
- The author argues that while whether it ranks with log4shell or Heartbleed is debatable, the ecosystem-wide PHP response is the community at its best — and expects a year of AI-found critical vulnerabilities ahead: don't blame the messenger, our critical software is getting the biggest security audit in history.
Related event: AI Uncovers Critical PHP2Shell Flaw Affecting 70% of Websites(2 posts)→
More from Safety
- NVIDIA unveils OpenShell Reference Architecture to set boundaries for enterprise AI agents — NicoVerderosa · 2026-10-23
- Crypto will 'die last': security expert explains why AI hacks hit everything else first — markjeffrey · 2026-10-23
- Most 'unauthorized' AI agents in US bank accounts were let in by customers themselves, per Axios — nptacek · 2026-10-23
- Economist Beraja: AI isn't a Napster moment—frontier tech legitimizes taking after the fact — danielrock · 2026-10-23
- Ben Bajarin: agentic AI is cyber defense's next frontier — the gating layer is how much authority you grant — BenBajarin · 2026-10-23
- 'I don't trust you': dev clashes over whether closed frontier models will actually patch real-world software — MoonL88537 · 2026-10-23