AI found a critical PHP flaw. The bigger failure began in 2024.
Security firm Calif, working on OpenAI's Patch the Planet initiative, used AI to discover a remote code execution route in PHP and reported it on August 11, with OpenAI independently reporting the same issue the same day. The incident revealed tensions over vulnerability disclosure practices and highlighted how AI-assisted security research is accelerating the pace at which flaws are found and exploited, straining open-source maintainers. PHP powers approximately 70% of websites, making these fixes critical infrastructure updates.
Key points
- Two critical PHP vulnerabilities prompted urgent fixes and service outages
- AI security research discovered flaws faster than traditional methods, raising disclosure tensions
- Highlights pressure on open-source maintainers from accelerated exploit development
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The New Stack did the reporting; read the original for the full story.
Read the full story at The New Stack
