Ryan Austin

Headlines · 1

1. Oct 21
   PHP2Shell: critical PHP flaws patched after AI-assisted discovery

   Wiz Research disclosed two critical vulnerabilities in core PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and nicknamed PHP2Shell, involving memory disclosure and unauthenticated remote code execution; Wiz says every PHP version released in the last decade, back to 5.4, is affected. PHP released patched versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on October 21, 2026, with both flaws rated CVSS 9.2, while OpenAI said it coordinated with PHP maintainers, Wiz, Cloudflare and others over roughly two months. OpenAI said Calif researcher Ryan Austin identified a critical flaw using GPT-5.6 Sol under its Patch the Planet initiative, with Wiz independently discovering and reporting both flaws; Calif later said Austin was the first to find and exploit the flaw, with AI compressing verification rather than supplying direction.

   Hacker News · AI（100+ 分） · 🔥 0

Experience and discussion from the community

Share my Ryan Austin experienceAsk about Ryan Austin