AI Bug Hunters Crack PHP as Claude Duet Clocks In
AI-found PHP flaws trigger a patch-now scramble, Anthropic previews a proactive agent, and a laptop coding model says AI helped build it.
Grab your hard hats, friends, because the internet just got a surprise plumbing inspection.
AI Finds a Decades-Old Hole in PHP
PHP, the language behind WordPress, Drupal and Wikipedia's MediaWiki, shipped emergency fixes on Oct. 21 for two critical flaws nicknamed PHP2Shell. 🛑 Wiz says every PHP version going back to 5.4 is hit by at least one of them, and attackers could use them to hijack servers.
The twist: AI helped dig them up. A researcher at Calif found one using OpenAI's GPT-5.6 Sol through OpenAI's Patch the Planet program, while Wiz independently found both with help from Gemini 4 Argon and GPT-5.6 Sol. Wiz says chaining the bugs into a working exploit was at the edge of what humans could practically pull off, and AI lowered that bar.
- 🧾 Patched versions: 8.5.12, 8.4.27, 8.3.36 and 8.2.35. PHP 8.1 and older get no fix.
- 🛡️ Cloudflare says its firewall was blocking the attack about nine hours before the public announcement.
If you run a PHP site, this is your sign to update. Today.
Claude Duet Wants to Be Your Work Buddy
Anthropic opened a waitlisted research preview of Claude Duet, an always-on agent app for professionals and small business owners. 💼 Built around Claude Opus 5.5, it sends a morning brief, keeps an eye on your connected apps, and keeps working in its own cloud computer while you're away.
Before it sends a message, pays for something or deletes anything, it asks first. Some things, like trading stocks, are off-limits even with your OK. It's for US Pro and Max subscribers to start. Think of it as an intern who actually reads the group chat.
A Laptop Coding Model Built Mostly by AI
Startup Recursive released Flint, a free coding model that runs on a laptop. 🖥️ It has 40 billion parameters but only uses 2.5 billion at a time, and Recursive says its automated research system, the Eureka Machine, helped with nearly every step. In the company's own tests it cranked out about 131 tokens per second on an M4 Pro MacBook Pro.
OpenAI's Decisions API Goes Live
OpenAI made its Decisions API generally available. 🧩 It uses GPT-6 Luna to answer quick yes-no, pick-one or score-it questions for apps, and you only pay for input tokens: $0.10 per million.
Other Cool Things to Know Today
- 📰 Uber is rolling out ChatGPT Work to more than 30,000 employees after a 1,000-person pilot.
- 👾 Google Cloud now offers an Anthropic-managed way to run Claude, with day-one access to new Claude features.
- 🔥 Nvidia released open Nemotron 3.5 retrieval models to help AI agents find the right documents faster.
For more such cool updates, follow us on Twitter!