
AI weekly: PHP2Shell, Claude Duet, no Fable 5.5 yet
I held this issue a few days because the rumor mill kept saying Claude Fable 5.5 was imminent. It’s still not here, so here’s the rest of the news: 460 tweets liked between October 11 and October 22 (here’s how the pipeline works). AI for Everyone AI Found Two Critical PHP Bugs, Then They Leaked a Day Early PHP, the programming language behind WordPress and a large share of the web, shipped emergency patches on October 21 for two flaws, nicknamed PHP2Shell, that let an attacker run code on a server without logging in. PHP rates both 9.2 out of 10, and they affect every version from 5.4 through 8.5. AI found them first: the security firm Calif spotted one in August with OpenAI’s GPT-5.6 Sol, Wiz found both independently with Gemini 4 Argon and Sol, and OpenAI coordinated the fix. Details leaked on October 20, and Cloudflare saw tens of thousands of attack attempts within 45 minutes. European agencies told admins to take unpatched sites offline, and government sites, Wikimedia services, and the Internet Archive went down or paused. Wiz estimates 70% of websites run PHP. The only full fix is upgrading to 8.5.12, 8.4.27, 8.3.36, or 8.2.35; the config workaround going around covers just one of the two bugs. (source: @OpenAI, @php_net) ...








