OpenAI says a security researcher at Calif used GPT-5.6 Sol to identify PHP exploits before attackers did, and has shared a tool that lets developers check if they’re using a potentially vulnerable version of PHP that needs patching. Ami Luttwak, co-founder of Google’s Wiz security team that also helped to identidy the PHP2Shell exploit, told the Wall Street Journal that its “the most severe AI vulnerability that was ever found.”