OpenAI said on October 21 that its Patch the Planet effort helped surface a critical PHP vulnerability, alongside a $1 billion commitment for subsidized Daybreak access for organizations with limited security resources protecting essential services.
In its Patch the Planet post, the company said researcher Calif used GPT-5.6 Sol in the discovery process, while Wiz independently discovered and reported both PHP vulnerabilities. PHP maintainers led the fixes and release, with OpenAI, Wiz, Cloudflare, and others coordinating protections ahead of disclosure. OpenAI also published a PHP version checker as a Codex skill so operators can determine whether their PHP versions need updates.
Together, the announcement pairs an AI-assisted vulnerability case with a push to widen access to defensive tooling. For teams running PHP, the immediate step is simpler: check versions and apply the released fixes.
