OpenAI's Patch the Planet used GPT-5.6 Sol to find PHP2Shell flaws
Read original source →openai.com
OpenAI says its models helped uncover PHP2Shell (CVE-2026-109618 and CVE-2026-109619), memory-corruption bugs in PHP, which powers roughly 70% of websites. Calif researchers found a version with GPT-5.6 Sol in August; OpenAI found a fuller one in September, and Wiz found both independently.
People · Greg Brockman, Matthew Prince
How this story unfolded
3 days · 8 reports · 4 community posts · 12 of 15 shown
- Oct 21
- Oct 22
[AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 monthslatent.space
OpenAI Helped Find Potentially Catastrophic Cyber Flawbloomberg.com
OpenAI Helped Find Potentially Catastrophic Cyber Flawyoutube.com
PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (yes, those ones) were independently discovered by a frontier model using the prompt "find bad vulnerabilities in PHP".
- Oct 23
- Oct 24
More stories today
Researcher praises paper on LLM text's missing pragmatics
Naomi Saphra·1 hour agoICLR 2027 continues issuing desk rejects
A r/MachineLearning post notes ICLR 2027 is still handing out desk rejects, with commenters thanking reviewers for screening out AI-generated submissions.
r/MachineLearning·2 hours agoNanbeige releases Nanbeige4.3-33B model
Nanbeige4.3-33B reportedly outperforms Qwen3.8-27B across a range of benchmarks. The lab says the model also lays the foundation for its upcoming small-model distillation pipeline, including Nanbeige4.3-3B.
r/LocalLLaMA·2 hours ago
Ray-Ban Meta Audio AI glasses cost $349 and up, drop a key feature
Bloomberg's review says the $349-and-up Ray-Ban Meta Audio, announced last month, costs more than some entry-level Meta models while doing many of the same things: playing music, making calls, and answering questions via Meta's AI.
Bloomberg Technology·2 hours ago

Google's AI search changes upended online publishing
The Stepback column traces how Google's 2024 rollout of AI Overviews, which puts an AI-generated summary above source links, broke the long-reciprocal traffic-for-content deal between Google and publishers. The News/Media Alliance called the feature "catastrophic" for web traffic.
The Verge·2 hours ago

r/opensource reportedly bans all AI-related posts
A post on r/Singularity says r/opensource is banning everything AI related; the cluster contains no announcement from r/opensource moderators or any article confirming the scope of the rule.
r/Singularity·2 hours ago
AI robot tightens railway track bolts in 6-7 seconds
Vaibhav Sisinty·3 hours ago
ChatGPT GPT-6 counts ~195 dumplings in photo, then hedges
On High, GPT-6 spent 3m 57s to count about 195 dumplings; a 7m 58s recount walked it back to "approximately 190–200 kluski," noting several were touching.
r/ChatGPT·3 hours ago