OpenAI Models Help Uncover Critical PHP Security Flaws

Key Info

OpenAI models, working under its Patch the Planet initiative, helped researchers discover critical security flaws in PHP, an open-source language used to run an estimated 70% of websites. OpenAI led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure.

Highlights

• The flaws affect PHP, which underpins roughly 70% of websites.
• OpenAI coordinated a coalition of maintainers, researchers, and security providers before public disclosure.
• The fix was intricate and required a major change to the PHP engine, which is why the preparation took about two months.
• Every site using PHP can now upgrade to a secure version and apply mitigations from security vendors.
• OpenAI rates the bug as severe given the flaws' severity and PHP's widespread use.