Peaked at #1 Now #1
OpenAI Finds Critical PHP Flaw
OpenAI's Patch the Planet helped find critical PHP flaws, coordinated fixes before disclosure.
Key points
- OpenAI said its models helped researchers, as part of its Patch the Planet initiative, discover critical security flaws in PHP.
- OpenAI led a coalition of maintainers, researchers, and security providers over the past two months to prepare fixes and protections before disclosure.
- OpenAI said every site using PHP can now safely upgrade its version, in addition to applying mitigations from various security vendors.
- @itszn13 said php2shell is the most consequential vulnerability he has ever helped discover and that the team worked with the PHP Foundation to harden the patch.
Key points and the reaction summary are written by AI from the posts on this page. Check the original post. How we use AI
Original post
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
https://t.co/TW3jrSbB3f
What others are saying
2 more-
itszn @itszn13 505
A researcher says php2shell is the most consequential vulnerability he helped find, with OpenAI models assisting discovery and coordinated patching.
View on X -
OpenAI said that due to the severity of the flaws and PHP's widespread use, it considers this one of the most impactful vulnerabilities in recent memory.
View on X
Top replies on X
Sign in to see 2 top replies from X
From @Maybejoshb, @WarmerSun and others. Spam removed, with English and Chinese translations.
Discussion 0
Sign up Sign in to join the discussion
No comments yet. Start the conversation.