Create

Sign in to ReadmeX

or

How we handle your data: Privacy Policy

ReadmeX

Your AI reading companion

What would you like to catch up on?

Pick a briefing, or ask your own question.

Your community and people briefings stay personal to you.

Wiz Atlas

AI overview

Sign in and the AI will write an overview from our coverage.

Headlines · 5

  1. AI models help uncover chained PHP2Shell remote-code-execution flaws

    O’Reilly Radar, citing Wiz Research, reports that Wiz Atlas, Gemini 4 Argon and GPT-5.6 Sol helped uncover two chained PHP remote-code-execution vulnerabilities, later identified as CVE-2026-109618 and CVE-2026-109619. The PHP Foundation released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 and urged all installations to update, while sites unable to upgrade were advised to go offline and be isolated. The reported timeline also says Amazon apparently detected exploitation before the vulnerabilities were prematurely disclosed and patched.

    O’Reilly Radar · 🔥 0
  2. AI Models Helped Discover PHP2Shell Vulnerabilities

    Wiz researchers said they used Wiz Atlas, Gemini 4 Argon and GPT-5.6 Sol to identify two PHP vulnerabilities in late August, then validated them in Drupal and WordPress before reporting them to the PHP development team. The flaws date back at least to PHP 5.4, released in 2012. PHP subsequently released patches for the two vulnerabilities, both rated critical under CVSS v4.0. Accounts differ on whether exploitation occurred before disclosure: Amazon said it first detected activity on October 17, while CISA said it had not observed exploitation.

    iThome 台湾 · 🔥 0
  3. OpenAI releases Codex skill to check sites for PHP2Shell vulnerabilities

    OpenAI released a Codex skill that helps website operators check whether their PHP deployments may be affected by the critical flaws CVE-2026-109618 and CVE-2026-109619, both scored 9.2 under CVSS v4.0. The PHP Foundation issued fixes on October 21, while Amazon later reported that the vulnerabilities were being broadly exploited in the wild. OpenAI credits its models with assisting researchers, although Calif researcher Ryan Austin disputed the claim that a model was the first discoverer of the initial exploit path.

    OpenAI (X) · 🔥 0
  4. PHP releases fixes for two critical unauthenticated RCE flaws

    PHP released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix CVE-2026-109618 and CVE-2026-109619, two critical flaws that can enable unauthenticated remote code execution under certain conditions. The PHP project said the bugs involve memory corruption and stale state in core memory-management and error-handling paths. Simon Willison’s Weblog and The Next Web reported that AI tools assisted vulnerability research and report validation, while the PHP Foundation retained human responsibility for selecting patches and assessing compatibility costs.

    Hacker News 首页（100+ 分） · 🔥 0
  5. PHP2Shell: critical PHP flaws patched after AI-assisted discovery

    Wiz Research disclosed two critical vulnerabilities in core PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and nicknamed PHP2Shell, involving memory disclosure and unauthenticated remote code execution; Wiz says every PHP version released in the last decade, back to 5.4, is affected. PHP released patched versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on October 21, 2026, with both flaws rated CVSS 9.2, while OpenAI said it coordinated with PHP maintainers, Wiz, Cloudflare and others over roughly two months. OpenAI said Calif researcher Ryan Austin identified a critical flaw using GPT-5.6 Sol under its Patch the Planet initiative, with Wiz independently discovering and reporting both flaws; Calif later said Austin was the first to find and exploit the flaw, with AI compressing verification rather than supplying direction.

    Hacker News · AI（100+ 分） · 🔥 0

Experience and discussion from the community

Share my Wiz Atlas experienceAsk about Wiz Atlas

Nobody has shared their experience with Wiz Atlas yet.