CONNECT WITH US
Tech

Tech

OpenAI says GPT-5.6-Sol helped find the PHP flaws now shaking the internet

Mashable - Tech logo

Published on

Add as a preferred source on Google
OpenAI says GPT-5.6-Sol helped find the PHP flaws now shaking the internet

OpenAI says its AI models helped uncover the critical PHP security flaws that have websites across the internet scrambling.

In a blog post on Wednesday, the company said it had spent the past two months leading a coalition of PHP maintainers, security researchers, and security companies to deal with the vulnerabilities, now nicknamed "PHP2SHELL." In its own Wednesday blog post, the PHP foundation thanked OpenAI, among other industry partners and cybersecurity researchers.

The newly exposed flaws could allow attackers to take over servers running PHP, the programming language behind a large share of the web. OpenAI called the bugs one of the most impactful security problems in recent memory.

According to OpenAI, security firm Calif found one of the critical flaws using the company’s GPT-5.6 Sol model as part of Patch the Planet, an OpenAI security program. Security company Wiz also discovered and reported both vulnerabilities on its own, OpenAI said. PHP’s maintainers led the work on the fixes. OpenAI, Wiz, Cloudflare, and other partners contributed research and helped prepare protections before the flaws went public.

OpenAI President Greg Brockman added more detail in a post on X. He said PHP was the first programming language he learned, which gave him a personal connection to the work.

According to Brockman, the bug had existed in PHP for 14 years. A smaller version of it was found in 2024 , but wasn’t treated as serious at the time. Calif found a version of the bug in August, and OpenAI’s own team independently found a more complete version in September.


Source link
Related Topics:Tech

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.