Latest / The AI Safety Briefing
The Daily Brief: AI Found the PHP Flaw That Took Governments Offline
Covers October 22, 2026On October 21, the PHP project shipped emergency patches for PHP2Shell: two critical memory-safety vulnerabilities in PHP core (CVE-2026-109618 and CVE-2026-109619), each rated 9.2 out of 10, that allow unauthenticated remote code execution. Frontier AI models helped find them: OpenAI's GPT-5.6 Sol assisted the security firm Calif, and Wiz independently found both flaws using Wiz Atlas, Google's Gemini 4 Argon, and GPT-5.6 Sol. Governments across Europe took websites offline, the NSA and FBI told organizations to patch or go offline, and the FBI issued its own warning…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.