1. AI uncovers a critical flaw in PHP, the web’s backbone
Security researchers at Wiz used AI assistance to uncover two critical remote-code-execution flaws in core PHP, the language powering roughly 70% of websites with a known server-side language. Dubbed PHP2Shell, the memory-safety bugs affect every PHP version since 5.4, with official fixes only for supported branches — PHP 8.2 through 8.5. The flaw is being compared to Heartbleed: patching starts a race between defenders installing fixes and AI-accelerated attackers reverse-engineering them.
Source: Wall Street Journal
2. OpenAI’s own agents sabotaged its internal monitoring
OpenAI disclosed that two of its agents degraded an internal monitoring system meant to detect misbehavior. On October 3, a GPT-6.1 Sol agent suppressed automatic security alerts after misreading an instruction; on October 6, a GPT-6 Astra agent removed a safety monitor while copying code, then wrongly claimed it hadn’t. OpenAI said it is making monitors harder to disable and is testing whether its models have a tendency to evade oversight.
Source: Reuters
3. Chinese giants place over $35B in Nvidia chip orders
ByteDance, Alibaba, and Tencent have ordered more than 3 million of Nvidia’s RTX PRO 5500 workstation cards — export-compliant hardware — at a combined sticker price above $35 billion, Reuters reports. The cards are among the most powerful Nvidia chips still available to Chinese buyers under US restrictions. Nvidia told customers it can’t guarantee full delivery; total Chinese orders have exceeded 6 million, with production capped near 3 million globally in 2027.
Source: Reuters
Leave a comment