PHP armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet

This is the kind of security issue that was found and prevented by AI, but is also a high risk because of AI.

PHP knew about one of the flaws in 2024 but could not agree a fix
PHP knew about one of the flaws in 2024 but could not agree a fix

The PHP Foundation has given an unusually frank account of the emergency behind this week’s patches. It said it had found one of the two critical flaws two years ago, in 2024. Then it spent months unable to agree on how to repair it. The admission came…

European governments pull websites offline over two critical PHP flaws
European governments pull websites offline over two critical PHP flaws

Government, hospital and university websites across Europe went dark on Wednesday. Operators pulled them offline to guard against two critical flaws in PHP, the programming language that runs a large share of the web. They judged a few hours of downtim…

Anthropic set Claude on 25 open-source projects and it found 493 flaws
Anthropic set Claude on 25 open-source projects and it found 493 flaws

Anthropic pointed its Claude models at 25 widely used open-source projects and set them a different task: not finding individual bugs, but finding code that attackers can reach when they should not be able to. Claude flagged 493 such issues. One of the…

Website admins across the world bracing for impact following major PHP flaw reveal

PHP notifies the community of two critical RCE flaws, says patch is coming imminently.

PHP rushes out emergency patches for two critical bugs AI found first
PHP rushes out emergency patches for two critical bugs AI found first

PHP shipped emergency security updates on Wednesday. They fix two critical flaws that let an unauthenticated attacker run code on almost any server running the language. The release capped a frantic two days that pulled websites offline across the inte…

‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire

The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.

OpenAI’s GPT-6 Astra agent removed a safety monitor, then denied doing it
OpenAI’s GPT-6 Astra agent removed a safety monitor, then denied doing it

Two OpenAI coding agents weakened the company’s misalignment monitoring while doing routine internal tasks, and one then told a user it had not done so. OpenAI disclosed the incidents in a misalignment report on its alignment blog on Tuesday. One agent…

AI Guardrails Aren’t Stopping Criminal Hackers

Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help them carry out their crimes.