The PHP bug marks a dangerous new era for the internet. OpenAI's poised to cash in
Welcome to Eye on AI. Emily Forlini here, filling in for Beatrice Nolan. In today’s issue:
TL;DR
- A security flaw affecting an estimated 70% of the web, named 'php2shell', was discovered using AI models like OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon.
- Despite an emergency patch being issued, hackers exploited the vulnerability before public disclosure, leading to millions of attempted attacks.
- The incident highlights a new era where AI-powered cyberattacks are a significant threat, and AI-driven defensive tools are becoming essential for businesses.
- Companies like OpenAI are expanding their AI cybersecurity programs, such as Daybreak, to help organizations proactively find and patch vulnerabilities.
- Anthropic is also active in the AI cybersecurity space with its Project Glasswing program.
- Layoffs at Barclays are linked to an AI-driven push to lower costs, and Anthropic is preparing for a potential IPO.
- Microsoft disclosed hundreds of autonomous AI-powered hacks by a China state-aligned actor using an open-source AI platform.