Researchers from the security firm Calif discovered several critical flaws in PHP, the language used by about 70% of websites worldwide, with help from OpenAI’s GPT-5.6 Sol model. Collectively named PHP2Shell, the vulnerabilities enable remote code execution and server-memory control, exposing visitor data and facilitating further attacks. After maintainers were alerted on August 11, 2026, a coordinated disclosure led to OpenAI launching the Patch the Planet initiative and expediting a patch for October 22. OpenAI also announced a $1 billion contribution to subsidize model access for defenders.
Source: Read the original article


