OpenAI packages Codex skill to check whether websites are affected by PHP vulnerabilities
OpenAI releases a Codex skill for checking whether websites are affected by the PHP security vulnerability it disclosed; users can point Codex at a specified repository and follow the guidance to complete the troubleshooting. The vulnerability was discovered by OpenAI models under the Patch the Planet program and involves PHP, the open-source language running about 70% of websites; fixing it requires major changes to the PHP engine. Sites using PHP can currently upgrade versions and combine this with mitigation measures from security vendors.
Why read this
SelectedAI score 74
OpenAI has packaged the PHP vulnerability troubleshooting process into a Codex skill, so readers can learn how to use the repository to guide the model in self-checking whether a website is affected.
Topics
View original postOpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. https://t.co/TW3jrSbB3f
View original
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. https://t.co/TW3jrSbB3f