Calif
A security company that discovers software vulnerabilities, including the PHP flaws it found using AI models.
Topic2 sourcesNo primary research yet
- Borne out by another source: 1
- Said here alone: 4
- Video: 1
- Article: 1
In English; the Slovenian edition is in preparation.
Where independent sources agree 1
Wes Roth gives the PHP2Shell timeline: researchers found the first PHP vulnerability on August 19. They achieved remote code execution against WordPress within 48 hours, reported the flaws to the PHP security team, and disclosed them publicly on October 21.
2 sources1 independent witness
Also said by
Wiz Research discovered the first PHP vulnerability on August 19, 2026, using Wiz Atlas, Gemini 4 Argon and GPT-5.6 Sol.
All sources side by side 2
they’re shutting it DOWN
Calif found the PHP2Shell flaws using OpenAI and Gemini models and a self-improving skill file. It joined OpenAI's Patch the Planet on July 30, 2026.
- Support
- Optimism
- Certainty
Po odkritih ranljivostih v PHP-ju visoka ogroženost kibernetske varnosti v Sloveniji
The source says Calif independently discovered the PHP vulnerabilities in August, using advanced artificial intelligence.
- Support
- Optimism
- Certainty
Related
- Calif joined OpenAI's Patch the Planet initiative on July 30, 2026.
- Calif's researchers used OpenAI's GPT models to find the PHP flaws.
- Calif's researchers used Gemini models to find the PHP flaws.
- Calif found and exploited the PHP flaws with AI-assisted research.
Around it
Odkrivanje ranljivosti s pomočjo umetne inteligence
Uporaba modelov umetne inteligence za iskanje in izkoriščanje varnostnih ranljivosti v programski opremi.
Topic2 sourcesNo primary research yet
Gemini
Googlova družina velikih jezikovnih modelov.
Topic1 sourceSingle source
GPT
Družina velikih jezikovnih modelov podjetja OpenAI.
Topic1 sourceSingle source
Patch the Planet
Pobuda organizacije OpenAI za iskanje in odpravljanje kritičnih ranljivosti v programski opremi, preden jih lahko napadalci izkoristijo.
Topic2 sourcesNo primary research yet
they’re shutting it DOWN
AI-assisted researchers using OpenAI and Google models found critical remote-code-execution flaws in PHP ("PHP2Shell"), which runs an estimated 70% of websites. Governments took sites offline and attacks began. Wes Roth argues this shows AI has changed vulnerability discovery: researchers with AI exploited WordPress within two days, where a 57-day human audit in 2024 had found nothing. He says unmaintained sites and smaller organisations are most exposed, and he urges users to protect themselves.
Video1 source3 surprising claims
Po odkritih ranljivostih v PHP-ju visoka ogroženost kibernetske varnosti v Sloveniji
Urad vlade za informacijsko varnost je zaradi odkritih ranljivosti v programskem jeziku PHP razglasil visoko ogroženost kibernetske varnosti v Sloveniji. Ranljivosti omogočajo oddaljeno izvajanje poljubne kode, zato urad organizacijam priporoča takojšnjo namestitev popravkov in začasne zaščitne ukrepe. Članek opisuje tudi, kako so podrobnosti ušle na splet in kako so se zaradi tega odzvale nekatere države.
Article1 source2 independent witnesses
- Government Office for Information Security
- National Security Agency
- Oddaljeno izvajanje kode
- OpenAI
- PHP
- PHP2Shell
- PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
- Patch the Planet: global response coordination as agents uncover critical vulnerabilities
- Security advisory: Critical remote code execution vulnerabilities, update now
- WordPress.org
- web-dedbc374478f
This text is written with AI.
Placed in: danes