研究人员借助 GPT-5.6 Sol 发现 PHP 漏洞，PHP 紧急修复Chinese only
研究人员借助 GPT-5.6 Sol 发现 PHP 漏洞；PHP 已紧急推出修复，材料称漏洞可能让无账户攻击者接管服务器。两处漏洞的 CVSS 评分均为 9.2。发现漏洞的 Calif 称，若不及时修补，全球约 70% 的网站可能面临风险；Wiz 称模型缩短了研究时间，Cloudflare 则报告已出现早期攻击尝试。
1 developments7 reports4 sources
Event developments 1
Researchers using GPT-5.6 Sol find PHP flaws; PHP rushes out fixes
Researchers using GPT-5.6 Sol found flaws in PHP, which rushed out fixes. The report says the flaws could let attackers without accounts take over web servers; both score 9.2 on the CVSS scale. Calif says about 70% of the world’s websites could be at risk without prompt patching. Wiz says the models shortened one researcher’s work, while Cloudflare reports early attack attempts.
View source reports · 4 sources · 7 reports
- Rohan Paul (@rohanpaul_ai) · Researchers using GPT-5.6 Sol find PHP flaws; PHP rushes out fixes
- Rohan Paul (@rohanpaul_ai) · Researchers using GPT-5.6 Sol find PHP flaws; PHP rushes out fixes
- TechCrunch AI 报道 · AI-assisted searches uncover PHP vulnerabilities; PHP Foundation issues patches
- Simon Willison AI 实践 · PHP releases security updates early after Wiz Research discovers a vulnerability with AI assistance
- IT之家 科技新闻 · Two critical PHP vulnerabilities fixed after OpenAI helped coordinate pre-disclosure protection
- Rohan Paul (@rohanpaul_ai) · Posts say researchers used GPT-5.6 Sol to find PHP flaws; PHP has released fixes
- Rohan Paul (@rohanpaul_ai) · Posts say researchers used GPT-5.6 Sol to find PHP flaws and PHP released fixes
All reports 7
Posts say researchers used GPT-5.6 Sol to find PHP flaws and PHP released fixes
The posts say Calif researchers used GPT-5.6 Sol to find PHP flaws, while the NSA urged organizations to patch two critical flaws or take unpatched servers offline. They also say PHP released fixed versions on October 21 and Cloudflare observed attack attempts before the release.
4 more sources reported this
- Rohan Paul (@rohanpaul_ai)
- IT之家 科技新闻
- Simon Willison AI 实践
- TechCrunch AI
Posts say researchers used GPT-5.6 Sol to find PHP flaws; PHP has released fixes
The posts say Calif researchers used OpenAI’s GPT-5.6 Sol to find flaws in PHP. The NSA urged organizations to patch two critical flaws or take unpatched servers offline. The material also says PHP released four fixed versions on October 21, while Cloudflare saw attacks before the release.
4 more sources reported this
- Rohan Paul (@rohanpaul_ai)
- IT之家 科技新闻
- Simon Willison AI 实践
- TechCrunch AI
Two critical PHP vulnerabilities fixed after OpenAI helped coordinate pre-disclosure protection
Security firm Calif used GPT-5.6 Sol to find one critical flaw, while Wiz independently found and reported a related vulnerability. PHP maintainers led validation, fixes and releases, with OpenAI, Wiz and Cloudflare providing support and coordination. Both vulnerabilities scored 9.2 under CVSS v4.0 and could allow unauthenticated remote code execution. The PHP Foundation has released fixes for the 8.2 through 8.5 branches; organizations using PHP should check their versions and apply patches.
3 more sources reported this
- Rohan Paul (@rohanpaul_ai)
- Simon Willison AI 实践
- TechCrunch AI
PHP releases security updates early after Wiz Research discovers a vulnerability with AI assistance
Updates across the PHP 8.x line address two remote code execution vulnerabilities. Wiz Research says it used Gemini 4 Argon and GPT-5.6 Sol in discovering the first one. A security firm mistakenly published a demonstration video during disclosure, contributing to the spread of exploitation proofs of concept; people running PHP should upgrade promptly.
3 more sources reported this
- Rohan Paul (@rohanpaul_ai)
- IT之家 科技新闻
- TechCrunch AI
AI-assisted searches uncover PHP vulnerabilities; PHP Foundation issues patches
Security firm Calif used GPT‑5.6 Sol in an OpenAI initiative to find one flaw, while the Wiz team used AI to find multiple PHP vulnerabilities. PHP Foundation has issued patches. The U.S. National Security Agency warned that sites unable to patch immediately should go offline until they can, because the flaws could let attackers access a server’s file system or a database.
3 more sources reported this
- Rohan Paul (@rohanpaul_ai)
- IT之家 科技新闻
- Simon Willison AI 实践
Researchers using GPT-5.6 Sol find PHP flaws; PHP rushes out fixes
Researchers using GPT-5.6 Sol found critical PHP flaws, and PHP rushed out fixes because the flaws could let attackers without accounts take over web servers. Both bugs have a CVSS score of 9.2. Calif warned that many websites could be at risk without prompt patches, while Cloudflare reported early attack attempts.
4 more sources reported this
- Rohan Paul (@rohanpaul_ai)
- IT之家 科技新闻
- Simon Willison AI 实践
- TechCrunch AI
Researchers using GPT-5.6 Sol find PHP flaws; PHP rushes out fixes
Researchers using GPT-5.6 Sol found flaws in PHP, which rushed out fixes. The report says the flaws could let attackers without accounts take over web servers; both score 9.2 on the CVSS scale. Calif says about 70% of the world’s websites could be at risk without prompt patching. Wiz says the models shortened one researcher’s work, while Cloudflare reports early attack attempts.
4 more sources reported this
- Rohan Paul (@rohanpaul_ai)
- IT之家 科技新闻
- Simon Willison AI 实践
- TechCrunch AI