OpenAI says it led the fix of two critical PHP flaws

OpenAI announced on 21 October that over two months it led a coalition to fix two critical vulnerabilities in PHP, a language behind a large part of the web. According to the company, the firm Calif identified a flaw using GPT-5.6 Sol, as part of its Patch the Planet initiative, and Wiz independently reported both. PHP's maintainers led the fixes.

OpenAI believes frontier AI found them before attackers did, warns that the same capabilities can help build exploits, and expects such findings to increase sharply in the coming months. It proposes a five-stage framework to coordinate the response and commits $1 billion in subsidised access to its Daybreak programme. All of this is the company's own account.