OpenAI's GPT-5.6 Finds Critical Bugs Across PHP
OpenAI coordinated with PHP maintainers and security firm Wiz to patch critical vulnerabilities, some found using its GPT-5.6 Sol model. Because PHP powers a huge share of the web, the flaws were serious enough to warrant a careful, coordinated disclosure rather than public release. OpenAI also shipped a PHP vulnerability checker and proposed a framework for handling future AI-discovered security flaws.
Why it matters
๐ป Developer ยท Check your PHP stack against OpenAI's new vulnerability checker. This is also a preview of AI-driven security scanning becoming routine.
๐ฆ Product ยท AI finding real-world security flaws at scale raises the bar for how fast products need to patch once disclosures go public.
๐จ Design ยท Not much design impact, but it's a reminder that the invisible infrastructure behind polished apps can be fragile.
๐ Business ยท A huge share of the web runs on PHP; this is a legitimate security event, not hype, and a sign AI-assisted vulnerability research is becoming mainstream.
๐ค Just Curious ยท An AI model found serious security holes across a huge chunk of websites before bad actors could, and it got quietly fixed.
Sources: OpenAI's PHP Patcher, AI finds a security hole in 70% of the web