OpenAI: الذكاء الاصطناعي كشف ثغرات خطيرة في PHP قبل المهاجمين، والأولوية الحين للتحديثOpenAI says AI found critical PHP flaws before attackers did, and the priority now is to update

OpenAI says that over the past two months it led a coalition of PHP maintainers, researchers and security providers to address critical vulnerabilities in the open-source language, which runs many websites and web applications. The company says it considers this one of the most impactful security issues in recent memory, given the severity of the flaws and how widely PHP is used.

Calif found one of the flaws using GPT-5.6 Sol as part of the Patch the Planet initiative, and Wiz independently discovered and reported both vulnerabilities. PHP's maintainers led the fixes, with help from OpenAI and partners such as Wiz and Cloudflare. OpenAI says that, to its knowledge, AI found the flaws before attackers did, giving defenders time to prepare fixes ahead of disclosure.

What should you do? OpenAI says the priority now for anyone using PHP is applying the fixes, and it has shared a tool, as a Codex skill, that checks for potentially vulnerable PHP versions. It also announced $1 billion in subsidised access to Daybreak for organisations with limited security resources that protect essential services.

But the company warns that the same capabilities can help attackers build exploits quickly, and it expects similar findings to rise sharply in the coming months. The post did not list the affected version numbers, so check PHP's official guidance or your hosting provider.