OpenAI's Patch the Planet finds PHP2Shell flaws in PHP
Read original source →openai.com
OpenAI says GPT-5.6 Sol helped researchers find two PHP memory-corruption bugs, CVE-2026-109618 and CVE-2026-109619, in code behind roughly 70% of websites. Fixes took two months of coordination; Cloudflare logged millions of exploitation attempts within hours of disclosure.
How this story unfolded
4 days · 8 reports · 4 community posts · 12 of 15 shown
- Oct 21
- Oct 22
[AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 monthslatent.space
OpenAI Helped Find Potentially Catastrophic Cyber Flawbloomberg.com
OpenAI Helped Find Potentially Catastrophic Cyber Flawyoutube.com
PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (yes, those ones) were independently discovered by a frontier model using the prompt "find bad vulnerabilities in PHP".
- Oct 23
- Oct 24
- Oct 25
More stories today
LocalLLaMA user asks how to make Gemma 4 26B follow writing examples
Reddit user reports Gemma 4 26B produces purple prose, slop, and no plot in creative writing, and asks how to get the model to use their examples. They say they lack the resources to run the 31B variant.
r/LocalLLaMA·2 hours agoSonnet 5.5 generates one-shot music video in ComfyUI
A Reddit user gave Sonnet 5.5 a single prompt and got a fully automated music video out of ComfyUI. The creator says it still has issues but is "not terrible for a one-shot music video."
r/ComfyUI·2 hours ago
Alex Kantrowitz discusses problems with AI agents like Instinct
A video segment from Alex Kantrowitz examines shortcomings of AI agents, using Instinct as the example. The cluster contains no article text, figures, or benchmark details beyond the title.
YouTube·2 hours ago
Kinoloom: open-source local film studio runs on 8 GB GPUs
Kinoloom is a Windows web app that turns an LLM-written story into a rendered movie, generating cast and shots and joining long takes in latent space. It targets 8 GB cards and supports LTX 2.5 and MiniMax H3.
r/StableDiffusion·2 hours ago
OpenFill brings free local Generative Fill to PhotoCraft via ComfyUI
OpenFill, the same engine behind the GIMP 3 plugin, now runs as a PhotoCraft panel that routes selections through the user's own ComfyUI backend. Features include Generative Fill with up to 5 variations, prompt-free object removal, and Generative Expand via edge drag or ratio presets.
r/StableDiffusion·2 hours ago
Arize AI's SallyAnn DeLucia on writing your first AI eval
A hands-on AI Engineer workshop walks through moving from vibe checks to real evals, covering how an eval differs from a unit test and the main eval types: LLM as a judge, decision models, code evals, annotations, and agent as a judge. It also covers reading a trace.
YouTube·2 hours ago
Kimi K3.1 Passes the Rubik's Cube Test
Matthew Berman's video covers Kimi K3.1 clearing a Rubik's Cube test. The clip is a YouTube segment from his Forward Future channel; no benchmark scores or model details are given in the available text.
YouTube·2 hours ago
Reddit users speculate Anthropic is delaying model releases to conserve compute
A r/Singularity post argues Anthropic may be holding back a new model because releasing it would cut into internal processing capacity, noting users were selectively routed to a more powerful model weeks ago with no release since.
r/Singularity·2 hours ago