Google Analytics counts our visits, with cookies. No thanks turns it off and removes its cookies; in Europe, the UK, Switzerland and India, or wherever we cannot tell where you are, it stays off unless you accept. Cookie Notice

Advertise
PRICES
BTCETHSOLXRPBNBTONDOTLTCPOLHBARNEARARBUNI

← Back to NewsDesk

AI summary of a third-party reportNeutralNewsDesk

OpenAI says its models found the PHP2Shell bug behind government site shutdowns

OpenAI President Greg Brockman says the company led a two-month coalition to fix a severe PHP flaw found with its models, after Finland, the Netherlands and France took government websites offline.

Why it matters: The flaw affected servers running PHP, the language behind most websites where the server-side language is known, and prompted three governments to take sites offline.

InvestIn.News NewsDesk · 1 min read
Share
Picture from Decrypt for: OpenAI says its models found the PHP2Shell bug behind government site shutdowns
Image: Decrypt
Original reporting: Jose Antonio Lanz, Decrypt

Key points

  • Calif researchers used GPT-5.6 Sol to find a version in August and OpenAI found a fuller one in September, with Wiz finding both independently
  • PHP shipped fixes a day after details leaked, ahead of an original 22 October target, with the release brought forward to 21 October

OpenAI says its models found the PHP2Shell bug that led Finland, the Netherlands and France to pull government websites offline, according to Decrypt.

Brockman said the original target was a 22 October release, but early leaks led maintainers to bring it forward to 21 October. He argued defenders need to move faster than attackers, especially with stronger models, and floated authorised defenders such as governments scanning for vulnerable servers and, in extreme cases, patching them remotely.

OpenAI has committed $1bn in subsidised access to Daybreak, its programme for defenders protecting critical infrastructure.

What to watch: Brockman said OpenAI expects to find many more such issues over the coming months.

Read the full story on Decrypt

Live updates on NewsFeeds:AIDesk editor: Keshav Aggarwal (accountable for this page; this summary was not edited by hand)

How this was produced: an AI model wrote this summary of Decrypt’s report, which we credit and link above. Read our Editorial and AI policy. Spotted a mistake? See Corrections.

Not investment advice. Read the risk disclaimer.

← Back to NewsDesk