← Front page

Big Technology Podcast · Friday, October 23, 2026

Critical PHP Remote Code Execution Vulnerability Discovered via AI Research Tool

Cognition CISO Alex Stamos discussed a critical pre-authentication remote code execution vulnerability in PHP, which powers up to 70% of the world's websites. The bug was discovered as part of OpenAI's 'Hack the Planet' initiative and has triggered massive automated exploitation attempts.

personAlex StamospersonAlex KantrowitzcompanyPHPcompanyOpenAIcompanyCloudflarecompanyCognition

The tape

2 quotes
“The creators of PHP, a technology that powers as many as 70% of the world's websites, disclosed a critical security issue that could be leveraged by hackers to take control of any system running its software.”
Alex Kantrowitz
“The bug was found by a in a a project that was being run by OpenAI called Hack the Planet, in which they have been providing”
Alex Stamos
Heard on Big Technology Podcast — “Google’s Potential, AI Money Spigot Shutting?, PHP Bug & Cybersecurity’s “Black October””, published Friday, October 23, 2026. Heardvine summarizes and quotes with attribution and timestamps, and links to the original everywhere.
Transcribed via deepinfra · $0.01
Critical PHP Remote Code Execution Vulnerability Discovered via AI Research Tool — Heardvine