OpenAI's Patch the Planet finds critical PHP2Shell flaws in code behind 70% of web
Read original source →openai.com
GPT-5.6 Sol helped Calif researchers find the PHP2Shell bugs (CVE-2026-109618, CVE-2026-109619) in August; OpenAI found a fuller version in September, and Wiz found both independently. The flaw sat in PHP for 14 years, and fixes shipped a day early after details leaked.
People · Greg Brockman, Matthew Prince
How this story unfolded
3 days · 8 reports · 4 community posts · 12 of 15 shown
- Oct 21
- Oct 22
Cloudflare links vulnerability discovery to defense with OpenAIopenai.com
[AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 monthslatent.space
OpenAI Helped Find Potentially Catastrophic Cyber Flawbloomberg.com
OpenAI Helped Find Potentially Catastrophic Cyber Flawyoutube.com
PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (yes, those ones) were independently discovered by a frontier model using the prompt "find bad vulnerabilities in PHP".
- Oct 23
- Oct 24
More stories today
OpenAI reportedly discounts to win Anthropic coding customers
Kimmonismus·2 hours ago
Pennsylvania requires labels on AI-generated ads
Gov. Josh Shapiro signed the Artificial Intelligence Deceptive Advertising Act, requiring image, video, audio, or text ads "significantly modified or generated by" AI to carry a label in the same format as the ad. The law exempts parody, satire, commentary, and "evidently fictional" content, and applies regardless of where an ad was created.
The Verge·2 hours ago
Civitai users complain LoRA creators lock models behind Buzz payments
Reddit users on r/StableDiffusion say LoRA and fine-tune creators are increasingly locking downloads permanently behind Civitai's Buzz currency. The poster tolerated earlier time-delayed releases for non-payers but objects to permanent paywalls.
r/StableDiffusion·3 hours agoReddit user tests MiniMax H3 video model on lighting and physics
User legarth ran environmental-effect tests on MiniMax H3 with an 8-step LoRA and SLA, covering mud splashes, smoke and detailed physics prompts like a tank flip. They said they were "still quite impressed" despite newer image models dominating attention.
r/StableDiffusion·3 hours ago
Qwen Code Desktop v0.26.1 adds daemon token persistence
Qwen Code shipped desktop-v0.26.1 and v0.26.1, adding daemon token persistence in the serve module. The release also fixes the tarball exec-bit gate to cover every spawned vendored binary.
Qwen Code Releases·3 hours agoZPix adds lasso inpainting and Krea 2 image-to-image
The local open-source image app now offers Photoshop-style lasso selection for inpainting plus keyboard shortcuts for fullscreen and recovering a selection. This version also adds image-to-image support for Krea 2.
r/StableDiffusion·4 hours ago
Andy Jassy describes AI demand as a barbell with a thin middle
Vaibhav Sisinty·4 hours ago
Sam Altman calls OpenAI's new agent a "totally different category"
In a video from The AI Entrepreneurs, Altman is described as making a "massive claim" about the new agent's power when asked how it benchmarks against competitors Grok, Muse, and Instinct. He said he tries every rival bot, but the snippet gives no benchmark numbers or launch details.
The AI Entrepreneurs·4 hours ago