Wiz: Gemini 4 Argon helped uncover critical PHP RCE flaws affecting 70% of the web
DynamicWebPaige · x · 2026-10-23
Wiz Research disclosed critical PHP core vulnerabilities (PHP2Shell) enabling unauthenticated RCE and Heartbleed-style memory disclosure across every PHP release of the last decade, threatening 70% of websites including WordPress and Wikipedia; patches shipped October 21.
- The flaws existed for decades, but demonstrating exploitability required an exceptionally complex chain beyond what human researchers could practically achieve — frontier AI models substantially lowered that barrier.
- Gemini 4 Argon was credited as invaluable for vulnerability discovery, exploit development, attack detection, and patch validation; Google also helped prepare mitigations for customers who can't patch immediately.
- Google DeepMind's Head of Gemini Security Raluca Ada Popa confirmed the collaboration.
A landmark case of frontier AI reshaping the vulnerability discovery landscape.
More from Models
- Kimi K3.1 Pro debuts: beats Claude Opus 5.5 on Terminal-Bench 4.0 at ~1/3 the cost — Yuchenj_UW · 2026-10-24
- Reddit user on Kimi K3: pinnacle of intelligence, but Qwen wins for daily use — SrijSriv211 · 2026-10-24
- Nathan Lambert: Kimi K3.1 Pro shows Moonshot cracked RL, China keeps pace on capability — natolambert · 2026-10-24
- MiniMax open-weights 428B-parameter M3.1 Flash with 23B active per token — lmoroney · 2026-10-24
- Inside the Artificial Analysis Cyber Index: three real-repo vuln-fixing evals, DeepSeek on top — ArtificialAnlys · 2026-10-24
- DeepSeek V4.1 Flash 1017 costs $0.42/task — 4x cheaper than GPT-6 Sol on Cyber Index — ArtificialAnlys · 2026-10-24