TLDRocket
22 October 2026
Today’s loudest AI thread isn’t about new model releases. It’s about software trust, and how fast the industry can lose it—and then scramble to regain it—when AI-adjacent workflows depend on ordinary web plumbing. OpenAI’s Patch the Planet joined coordinated research with others to disclose and remediate PHP2Shell memory-corruption vulnerabilities in core PHP, impacting roughly 70% of the web. Even without confirmed successful attacks, the details were leaked early enough to trigger precautionary shutdowns and emergency patching behavior worldwide, and the fix only works on the latest PHP version—so administrators with older deployments faced the unglamorous work of upgrading and patching, not just swapping a plugin.
Read the full briefing →