AI research by OpenAI partners and Google’s Wiz uncovers critical PHP flaws
PHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
What happened
AI-assisted research by Calif through OpenAI’s Patch the Planet initiative and separately by Google’s Wiz uncovered critical PHP vulnerabilities dating back to version 5, released in 2004. The PHP Foundation issued patches, and the NSA urged affected sites to patch immediately or go offline until patched; the recommended current version is PHP 8.5.12. OpenAI reported no known exploitation in the wild, while Wiz warned that LLMs could help attackers adapt exploits across PHP versions and configurations.
Why it matters
The report highlights how AI can help uncover longstanding software vulnerabilities while also lowering exploitation barriers, making coordinated disclosure and timely patching consequential for widely used infrastructure.
Read next
More changes in today’s briefingMicrosoft Research and Collaborator Resolve the KLS Conjecture With Human-Directed AIKeep up with AI, one email a day
Model releases, price changes and compute developments, with original sources. Free, confirmed by email, and easy to unsubscribe. Read a past issue · 2026-10-22