AI models identify critical PHP vulnerability

OpenAI and Google used AI models to identify a critical PHP vulnerability affecting millions of websites, according to The-decoder. OpenAI's GPT-5.6 Sol discovered the flaw as part of the Patch-the-Planet initiative. The security firm Wiz independently confirmed the findings using its Wiz Atlas platform alongside Google's Gemini 4 Argon. These models identified the issues before attackers could exploit them. A tool on GitHub now allows server operators to check their PHP versions.

Why it matters

Businesses using PHP must recognise that AI has changed the speed of vulnerability discovery. While these tools help security teams find flaws, they also allow attackers to automate the process of scaling exploits across different server configurations. For a Swiss company, this means security audits can no longer rely on manual checks alone. You need to integrate automated scanning into your development lifecycle to keep pace with machine-led threats.

• Automated exploit adaptation makes older, unpatched systems higher risk targets.
• Security teams must prioritise AI-driven detection tools to match the speed of modern threats.
• Development cycles require immediate patching once a vulnerability is flagged by any public tool.

What to watch

Check your current PHP version against the new GitHub tool to see if your infrastructure is exposed. You should also review your security roadmap to include AI-driven threat detection. The source suggests that findings of this scale will increase sharply in the coming months. Prepare for a shift where manual security updates are no longer sufficient to protect your data.

Within a year, automated scanning will be a baseline requirement for deployment. This shift occurs if companies prioritise immediate vulnerability detection over manual review cycles.