Ethan Mollick expects AI vulnerability discoveries to accelerate consumer software updates

What happened

Ethan Mollick says companies he talks to are struggling with the pace of patches as AI defenses find issues ahead of what he calls an inevitable wave of cyberattacks by other AIs. He expects consumers to face the same need to get everything updated frequently and quickly.

The story so far

PHP released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to patch two security vulnerabilities, according to Baoyu, who linked the updates to flaws OpenAI said its models helped researchers discover through its Patch the Planet initiative. Baoyu identified the vulnerabilities as CVE-2026-109618 and CVE-2026-109619, described them as allowing server takeover without authentication, and said researchers call them PHP2Shell. OpenAI introduced Patch the Planet to connect security researchers, software maintainers, and incident responders working to address critical vulnerabilities in open-source software. The company described the PHP flaws as critical and estimated that PHP, an open-source programming language, is used to run 70% of websites.

Keep reading

Trending now

1. 1Mistral and NVIDIA Announce Industrial Engineering AI Collaboration and Open Benchmarks
2. 2Mistral Releases Voxtral 3 Speech Models, Voice Agents API and LiveKit-Based SDK
3. 4DeepSeek Open-Sources DeepInfer and API Components, With Model and Hardware Limits
4. 5OpenAI Acquires Orchestra Bio to Add Drug Development Operations to Its Life Sciences Tools