On October 21, 2026, OpenAI issued an announcement disclosing details of its involvement in discovering and coordinating the remediation of two critical security vulnerabilities in the PHP programming language. This initiative, driven by OpenAI's 'Secure the Entire Internet' program, brought together software maintainers, security researchers, cloud service providers, and government cybersecurity agencies to collectively mitigate risks posed by these vulnerabilities to global internet infrastructure. OpenAI stated that advanced artificial intelligence models are now capable of identifying widely impactful software security flaws, making the rapid translation of such discoveries into protective measures a critical challenge in the field of cybersecurity.
