@OpenAI: OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws …
Summary
OpenAI's Patch the Planet initiative helped researchers discover critical, internet-scale security vulnerabilities in PHP, coordinating a two-month disclosure process with maintainers to deliver fixes ahead of attackers and marking a new phase where frontier AI finds high-impact security bugs.
View Cached Full Text
Cached at: 10/21/26, 02:31 PM
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
Similar Articles
OpenAI Launches Full-Scale Effort to Patch Open-Source Bugs as It Takes on Anthropic’s Mythos
OpenAI launches Patch the Planet, a full-scale effort with Trail of Bits and HackerOne to help open-source projects patch vulnerabilities using AI tools, alongside other cybersecurity announcements including an improved GPT-5.5-Cyber model and expanded government access.
OpenAI launches new initiative to help find and patch open-source bugs
OpenAI announced a new initiative called 'Patch the Planet' in partnership with Trail of Bits to help open-source maintainers find and fix security bugs using AI tools like Codex Security.
Patch the Planet: global response coordination as agents uncover vulnerabilities
OpenAI led a coalition to disclose critical PHP vulnerabilities first discovered by GPT-5.6 Sol, sharing a PHP version checker and a proposed global response framework while committing $1B in subsidized Daybreak access for frontline defenders.
Patch the Planet: a Daybreak initiative to support open source maintainers
OpenAI announces Patch the Planet, an initiative with Trail of Bits to help open-source maintainers strengthen security by using AI models to identify and patch vulnerabilities, reducing the burden on maintainers.
PHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
OpenAI's Patch the Planet initiative and Google's Wiz used AI models like GPT-5.6 Sol and Gemini 4 Argon to uncover two critical, decades-old PHP vulnerabilities present since 2004, prompting an NSA warning and urgent patches from the PHP Foundation for the ~70% of websites running PHP.