1. AI-assisted research exposes PHP2Shell flaws
PHP shipped emergency patches (8.2.35, 8.3.36, 8.4.27, 8.5.12) for two critical engine flaws that allow unauthenticated remote code execution and memory disclosure. Calif found one using OpenAI’s GPT-5.6 Sol, and Wiz independently found both with help from Gemini 4 Argon. Details leaked a day early, and several governments took sites offline. It is a concrete case of frontier models finding internet-scale bugs faster than defenders can patch them.
Source: OpenAI
2. Anthropic previews Claude Duet
Anthropic opened a waitlisted research preview of Claude Duet, a standalone proactive agent for US Pro and Max subscribers. It runs on Opus 5.5 in its own cloud virtual machine with a browser, checks connected apps every few hours, sends morning briefs, and asks approval before sending, paying, signing, or deleting. It puts Anthropic in direct competition with OpenAI’s Dots and Meta’s Muse for always-on assistants aimed at professionals and small businesses.
Source: Anthropic
3. Recursive releases Flint
Richard Socher’s Recursive released Flint, a free Apache 2.0 coding model with 40 billion parameters, about 2.5 billion active per token, that runs on a laptop at roughly 131 tokens per second on an M4 Pro MacBook. The company says its automated research system, the Eureka Machine, contributed to nearly every stage of development. It is an early public test of AI building AI, still under human oversight.
Source: TechCrunch