Threat Pulse 62High
OpenAI launches Patch the Planet and $1 billion Daybreak subsidy after PHP2Shell
Severity 2ResolvedconfirmedAI and software supply chainAI-related

Alongside the PHP2Shell disclosure, OpenAI announced Patch the Planet, a framework for coordinating AI-found vulnerability disclosures with vendors and governments, and said it would spend $1 billion subsidizing access to its Daybreak security auditing platform for under-resourced organizations. Greg Brockman said OpenAI led a two-month coalition on the PHP fix.

What to do: Program live; outside reviewers invited.

AI angle: Found with GPT-5.6 Sol; the UK government said NCSC was briefed by OpenAI a week before disclosure.

· 15 days ago · global open-source ecosystem · Gizmodo
SourcesGizmodoDecryptopenai.com
On X
@OpenAIverifiedOct 21, 14:04 UTC

OpenAI models helped researchers, operating as part of our Patch the Planet initiative, discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful

Open on X
Why this score

A defensive program announcement; relevant because it confirms AI models are now a primary source of critical vulnerability discoveries.

Back to the board

Updated Nov 5, 01:45 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.