OpenAI's Patch the Planet used GPT-5.6 Sol to find PHP2Shell flaws
Read original source →openai.com
OpenAI says GPT-5.6 Sol helped surface CVE-2026-109618 and CVE-2026-109619, memory-corruption bugs in PHP's out-of-memory and fatal-error handling that affect roughly 70% of websites. The flaw sat in PHP for 14 years; fixes shipped Oct 21 after details leaked ahead of an Oct 22 target.
People · Greg Brockman, Matthew Prince
How this story unfolded
1 day · 7 reports · 3 community posts · 10 of 13 shown
- Oct 21
- Oct 22
Cloudflare links vulnerability discovery to defense with OpenAIopenai.com
[AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 monthslatent.space
OpenAI Helped Find Potentially Catastrophic Cyber Flawbloomberg.com
OpenAI Helped Find Potentially Catastrophic Cyber Flawyoutube.com
PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (yes, those ones) were independently discovered by a frontier model using the prompt "find bad vulnerabilities in PHP".
More stories today
Review charts brain-inspired chip pathways for greener data centers
Researchers from the University of Ottawa, Columbia and Hanyang University published a systematic review in Advanced Functional Materials mapping materials, device physics and circuit integration for neuromorphic hardware neurons. Lead author Dr. Kannan Udaya Mohanan says the devices operate more like a human brain than a traditional processor.
r/Singularity·1 hour ago
Suno user reports lyrics often come out as screaming
A first-time Suno user says generated vocals are "almost always screaming like it's witnessing the end of the freaking world" when experimenting with lyrics. They mostly remix their own instrumentals and are asking the community for better prompts.
r/SunoAI·1 hour ago
LocalLLaMA user asks if 128GB RAM upgrade enables larger local models
A Reddit user with 48GB VRAM (2x RTX 3090) and 48GB DDR4 asks whether 128GB DDR4 would let them run Deepseek V4.1 1017 and GLM 5.3 Flash at low quants at ~20 tokens/sec. No benchmarks or answers are included in the post.
r/LocalLLaMA·2 hours agoAnthropic opens guest investigator call for life sciences
Anthropic is inviting principal investigators at academic institutions, nonprofits, and government labs to apply for 8–12 week projects using Claude on causal human biology, structural and computational molecular biology, medicinal chemistry, drug discovery, and clinical science. Anthropic runs its models and harnesses at no cost, and outputs are published with open-source data and code.
Anthropic News·2 hours ago

Anthropic uses Claude to formally verify 100+ open-source libraries
In a collaboration with Theorem, Claude proved security properties at the RISC-V assembly level in over 100 real-world open-source libraries — described as the first large-scale AI formal-verification effort on production software at that level. Claude also found bugs that had survived trillions of test runs.
Anthropic Research·2 hours ago

Reddit user shares Claude prompt trick for non-developers
A r/ClaudeAI user instructs Claude to preface answers with "The industry standard term for what you're describing is..." when given clumsy descriptions. They say it improved their prompting and constrains Claude's more inventive tendencies.
r/ClaudeAI·2 hours agoQwen Code v0.26.0 nightly adds daemon token persistence
Nightly build v0.26.0-nightly.20261022.bf66a26c97 adds daemon token persistence and a release fix covering every spawned vendored binary in the tarball exec-bit gate. Also includes managed-agent test changes reusing a same-key cancel.
Qwen Code Releases·2 hours agoClaude Code 2.1.309 adds APCA contrast checks and ultrareview trust gate
The bundled dataviz skill now accepts APCA as a text-contrast measure while keeping WCAG 2 ratios for AA conformance, and adds an apca(text, background) function to its palette validator. claude ultrareview now requires workspace trust, with scripts passing --trust-workspace or setting CLAUDE_CODE_DISABLE_ULTRAREVIEW_TRUST_CHECK=1.
Claude Code Changelog·2 hours ago