NSA warns of critical PHP vulnerabilities found by OpenAI and Google Wiz

The U.S. National Security Agency warned of two critical holes in PHP, a server-side language powering roughly 70% of the internet's websites, including those using WordPress. These flaws, present in all PHP versions since 5 (released in 2004), allow attackers to infiltrate server file systems or databases. OpenAI found one flaw using GPT-5.6 Sol as part of its “Patch the Planet” initiative, while Google Wiz used its Wiz Atlas security AI agent, Gemini 4 Argon, and GPT-5.6 Sol to find multiple vulnerabilities. The current supported version is 8.5.12, and unpatched sites should be taken offline immediately. OpenAI and Wiz confirmed researchers found these before hackers, but Wiz warned that AI lowers the barrier for exploitation.