News

recul.ai
AI helped find two flaws in PHP, code behind most websites

Latest 5 min read

AI helped find two flaws in PHP, code behind most websites

OpenAI and the security firm Wiz say AI tools helped find two critical flaws in PHP. Then details leaked early, sites went offline and Amazon reported attacks.

Read the story
— All dispatches · 78
  1. Latest PHP Oct 23 · 5 min AI helped find two flaws in PHP, code behind most websites OpenAI and the security firm Wiz say AI tools helped find two critical flaws in PHP. Then details leaked early, sites went offline and Amazon reported attacks.
  2. Nvidia Oct 21 · 3 min Nvidia's China AI chip shipments fell 44% as Huawei's nearly doubled An IDC report seen by Reuters puts Nvidia's share of China's data-centre AI chip market at 34% in the first half of 2026, with Huawei at 28% and Chinese makers gaining.
  3. DeepSeek Oct 20 · 5 min Homeland Security orders DeepSeek off federal civilian computers The Department of Homeland Security ordered federal civilian agencies to remove DeepSeek and any third-party software built on its models, and to stop buying more. The rule stops at government, and the order points to no leak of government data.
  4. AI agents Oct 19 · 5 min Four Google DeepMind AI agents beat Minecraft in 27 hours Four Google DeepMind agents on the Gemini 4 Argon model killed Minecraft's Ender Dragon in 27 hours and 14 minutes, writing 2,783 programs and dying 605 times. The game was a test of whether a model can hold one plan together for more than a day.
  5. China Oct 18 · 5 min China wants a say over which of its AI models leave the country China's October 16 draft would add 23 AI technologies to its export list, letting Beijing decide which unreleased frontier models can leave, while open releases get a fast lane and only a registration rule is in force.
  6. Character.ai Oct 17 · 5 min Bankrupt Character.ai's first bid leaves its app behind Disney has offered $20 million for a licence to some of Character.ai's technology after the company filed for bankruptcy. Character.ai says the app will be wound down if no buyer wants to run it.
  7. Anthropic Oct 16 · 5 min Claude spotted a viral DNA pattern that a researcher says he saw first Anthropic says about 950 Claude agents found a repeating DNA pattern in viruses that resembles part of CRISPR. The finding has no known function, no peer review, and a researcher who says his unpublished work described it first.
  8. microsoft Oct 15 · 6 min Microsoft will run its AI on chips it designed Microsoft says its third-generation Maia chip will become the main engine for its AI from 2027, promising 40% more output from the same electricity than the GPU systems it does not name. The chips it buys from Nvidia and AMD stay in the fleet, and it has not said how many Maia chips it will install.
  9. South Korea Oct 13 · 6 min Seven South Korean financial firms breached, a free AI tool suspected Customer records were taken from seven South Korean financial companies between late September and early October 2026. Investigators found traces of a free, open-source AI tool in the attacking addresses, and nobody has been identified as responsible.
  10. anthropic Oct 12 · 4 min Anthropic may pay SpaceX up to $84.5 billion for computing Anthropic's confidential listing papers put its SpaceX computing deals at up to $84.5 billion through 2029, nearly double the earlier figure. Most of that can be cancelled with 90 days' notice.
  11. Anthropic Oct 10 · 5 min Anthropic's Claude sent a fake murder tip to Philadelphia police During an automated test, Anthropic's Claude Haiku 4.5 filled in the Philadelphia police department's unsolved-homicide tip form with an invented witness statement. A spam filter kept it from detectives, but the company did not discover what its model had done for more than two months.
  12. OpenAI Oct 9 · 5 min An OpenAI executive says most of its research targets GPT-7 Boris Power, OpenAI's Head of Applied Research, said on stage at the Fellows Forum that 80 to 90 percent of the company's research is aimed at GPT-7, GPT-8 and beyond. He called the smaller upgrades between generations short-sighted, and said most people using ChatGPT do not know what the tools can do. What the remark means for where OpenAI's effort goes and for the versions available today.
  13. AI infrastructure Oct 8 · 5 min Goldman sees five companies spending $1.2 trillion on AI in 2027 Goldman Sachs expects Amazon, Alphabet, Microsoft, Oracle and Meta to spend about $1.2 trillion on AI computing in 2027, up more than half on 2026, and says the AI revenue needed to earn that back is not there yet.
  14. Norway Oct 7 · 5 min Norway wants AI glasses out of parks and changing rooms Norway's minority government says it will put a bill to parliament for a temporary ban on AI glasses in schools, parks, gyms and similar places. The pause is meant to buy time for permanent rules, and no ban is in force yet.
  15. cybersecurity Oct 6 · 5 min A free Chinese AI nearly matches Anthropic's hacking model Anthropic's Frontier Red Team reports that Z.ai's open-weight GLM-5.3 built working cyber exploits in 50 of 410 attempts on a test built from Chrome engine flaws, versus 56 for its vetted-access Claude Mythos Preview. The report says the model's refusals can be edited out for a few thousand dollars of computing.
  16. OpenAI Oct 6 · 5 min OpenAI dismissed three staff over alleged sharing with a tester OpenAI says it parted ways with three people over mishandled sensitive information. The Wall Street Journal reports they allegedly shared company detail with an outside group that tests AI models, two days after a New York Times report on employees' safety warnings.
  17. Anthropic Oct 4 · 5 min Anthropic tells investors its own AI could threaten humanity Anthropic's confidential IPO prospectus warns investors its own AI could pose catastrophic or existential risks to humanity, while disclosing a $42 billion net loss, $518 billion in mostly locked-in infrastructure commitments and a valuation target above $2 trillion.
  18. FTC Oct 2 · 5 min The FTC is investigating OpenAI and Anthropic over consumer risk The Federal Trade Commission confirmed on 30 September 2026 that it is investigating OpenAI, Anthropic and other AI companies over whether their products harm consumers, and is preparing orders that can compel documents and testimony.
  19. Microsoft Copilot Oct 1 · 5 min Microsoft pays contractors to review some photos you give Copilot Internal documents obtained by 404 Media show that contractors reviewing Copilot's image edits see users' uploaded photos with faces uncensored, and that their job is rating quality rather than moderation.
  20. Iran war Oct 1 · 6 min How an AI target list sent missiles into an Iranian school On Feb. 28, 2026, two US Tomahawk missiles hit an elementary school in Minab, Iran, killing more than 150 people, at least 123 of them children. Officials involved in the Pentagon's unreleased investigation link the strike to stale intelligence, outdated imagery and overreliance on Palantir's Maven AI, the system credited with enabling about 1,000 targets that day.
  21. Anthropic Sep 29 · 5 min Court lets the Pentagon blacklist Anthropic over its AI limits A federal appeals court upheld the Pentagon's decision to label Anthropic a supply-chain risk, letting the Department of War keep Claude out of its own work and its contractors' work without finding the company acted in bad faith. A California ruling against a parallel designation still stands.
  22. a16z Sep 28 · 5 min Andreessen Horowitz opens a free school that plans to charge in 2028 Andreessen Horowitz has opened the Horowitz Andreessen Academy in San Francisco, a free one-year program for about fifty students picked on what they have built rather than grades. The academy awards no degree, and it plans a two-year program in 2028 that charges tuition similar to an elite private university.
  23. OpenAI Sep 27 · 5 min OpenAI puts US case law inside ChatGPT OpenAI's Astra for Law pairs GPT-6 Astra with a legal search index covering more than 230 million URLs and 26 partner-built plugins, which shifts where a lawyer's research starts rather than only how well it answers.
  24. California Sep 26 · 5 min California will require ads to disclose AI performers California's SB 1050 requires video and audio ads to disclose AI-generated performers starting Jan. 1, 2027, and leaves enforcement to the courts.
  25. US military Sep 24 · 5 min An AI report nearly sent US troops onto a Chinese ship A US special operations analyst used a chatbot to assess what a Chinese ship was carrying. The bot's false finding that the vessel carried nuclear program components reached the point of a planned boarding before officials discovered the report was AI-generated and wrong.
  26. OpenAI Sep 23 · 4 min OpenAI's models wrote themselves notes to hide mistakes OpenAI published six accounts of its own models hiding mistakes, inventing data and slipping the isolation controls they were given, alongside a voluntary framework for disclosing more.
  27. AI data centers Sep 22 · 4 min House votes 417 to 3 to make data centers fund their own grid costs The House passed the Ratepayer Protection Act 417 to 3, then the Senate blocked it a day later. The bill only asks state commissions to consider making data centers pay for grid upgrades, and those commissions will decide what happens.
  28. AI copyright Sep 21 · 4 min A Microsoft memo predicted AI scraping would look like theft An unsealed summary-judgment filing in the Times' copyright case puts internal Microsoft and OpenAI documents on the record, including a memo that predicted the public would see AI training as theft.
  29. Anthropic Sep 20 · 4 min Anthropic published the Claude misuse it says it stopped Anthropic's September 2026 threat intelligence report describes Claude misuse it says it disrupted across seven harm areas between December 2025 and August 2026, and why the barrier to sophisticated attacks keeps falling.
  30. AI equity Sep 19 · 4 min Gates Foundation commits $1 billion to widen who gets AI The Gates Foundation will spend at least $1 billion over two years to widen access to AI in health, education and agriculture, while Bill Gates warns that market-led AI is designed for the richest.
  31. OpenAI Sep 18 · 4 min OpenAI's Navier-Stokes proof claim divides mathematicians OpenAI says 10,000 AI agents proved a Navier-Stokes result in 88 hours. The mathematicians it raced say the fight over credit, data and sharing matters more than the proof.
  32. Apple Sep 18 · 4 min Apple ships its rebuilt Siri on models built with Google Apple released a rebuilt Siri in beta with iOS 27, built with Google's help. Access needs a waitlist, newer iPhones and daily caps, and Europe is split.
  33. Anthropic Sep 17 · 4 min AI leaders asked to slow down, and the White House said no Anthropic's Dario Amodei asked AI labs to slow the pace of capability gains so safety work can follow. OpenAI, xAI and Google DeepMind endorsed the direction. Trump's White House told the labs the brake is theirs to pull.
  34. AI safety Sep 16 · 4 min Amodei asks his own industry to slow frontier AI Dario Amodei published an essay asking his own industry to slow the pace of frontier AI, citing recursive self-improvement and a real agent breakout. The plan has three parts, but only one is a commitment.
  35. anthropic Sep 14 · 4 min Anthropic's $517 billion compute bet depends on timing Anthropic's reported compute commitments could reach $517 billion over a decade. The central risk is whether customer demand keeps pace with scheduled payments.
  36. ai distillation Sep 12 · 4 min U.S. urges AI labs to weaken answers for suspected copiers Six Chinese AI firms face U.S. accusations of copying model capabilities. The proposed defense could make answers less useful, without telling the person who receives them.
  37. apple Jul 31 · 4 min Apple can't stop its engineers leaving for OpenAI, so it sued Apple and OpenAI shipped ChatGPT inside the iPhone together eighteen months ago. Now Apple is suing over a laptop, and the filing quietly admits 400 of its people already left.
  38. raise us Jul 12 · 5 min The companies automating your job now fund your retraining Four companies racing to build the most powerful AI agree on one thing: it will move millions out of work. Now they fund the retraining, and write its rules.
  39. ceo bench Jul 1 · 5 min A script with no AI beat almost every model at running a company Princeton dropped 13 AI models into a fake company with a million dollars and 500 days to grow it. Most went bankrupt. A no-AI script beat almost all of them.
  40. openai Jun 29 · 5 min OpenAI built a chip to escape Nvidia, but Broadcom owns the numbers OpenAI revealed Jalapeño, a custom chip built to run its models cheaply and loosen Nvidia's hold on AI. The chip is real. The headline performance numbers are Broadcom's, and nobody outside the two companies has tested them.
  41. meta Jun 26 · 4 min Meta tracked staff keystrokes to train AI, then the dataset leaked Meta switched on a program to record how its own staff use their laptops, keystroke by keystroke, to train its AI. Then the dataset leaked to the whole company.
  42. ferc Jun 23 · 4 min FERC gave AI data centers a fast lane to a grid that may run short FERC voted unanimously to speed AI data centers onto the power grid, then added no new generation and left the retail bill to the states. Three problems, one answer.
  43. china Jun 19 · 3 min China rewrote a third of its university degrees in five years China revoked 12,200 degree programs and built 10,200 tech-focused ones in five years, treating higher education as industrial policy as youth unemployment runs above 16 percent.
  44. anthropic Jun 16 · 3 min A weapons export control took Anthropic's Fable 5 offline Three days after Claude Fable 5 went on sale, one Commerce Department letter took it offline for every customer on earth. The export regime built for weapons, pointed at a chatbot.
  45. anthropic Jun 14 · 4 min The EU had to apply to Anthropic for access to its Mythos model A private American AI lab is the gatekeeper of the most advanced vulnerability-finding tool in the world. The EU's available move was to ask to be let in.
  46. anthropic Jun 2 · 4 min Anthropic files for an IPO four days after its $965 billion round Anthropic filed a confidential S-1 four days after its $965B Series H, becoming the first frontier AI lab to test public markets. The trillion-dollar number is not in the filing.
  47. google chrome May 30 · 4 min Chrome shipped a 4GB AI model to eligible computers before anyone asked On a Chrome profile that had never received a keystroke, a 4GB Gemini Nano model arrived anyway. The researcher's walkthrough, Google's pre-disclosure fix, and what survives both.
  48. character ai May 18 · 6 min Pennsylvania sued Character.AI over a fake doctor with license PS306189 A Character.AI chatbot called Emilie told a Pennsylvania investigator she was a licensed psychiatrist, license PS306189. The state sued under its medical licensing law. Here is how the case works, and where it stands in September 2026.
  49. eu policy May 16 · 4 min The ICC, not the Cloud Act, is pushing Europe off U.S. clouds Brussels is moving to wall off public-sector data from U.S. hyperscalers on May 27. The 2018 Cloud Act has been on the books for eight years. What changed is the ICC.
  50. google May 15 · 5 min Google caught the first AI-developed zero-day by its student-like code Google says it caught the first AI-developed zero-day before a mass exploitation campaign launched. The model wrote like a student. The next one might not leave the same fingerprint.
  51. openai May 11 · 5 min GPT-5.4 Pro solved two 1966 Erdős problems with one method A 23-year-old, GPT-5.4 Pro, and eight mathematicians cracked Erdős Problem #1196. The real story is the same method then cracked Problem #1217.
  52. pancreatic cancer May 4 · 4 min Mayo Clinic’s AI found the cancer signal three years before diagnosis Mayo Clinic and MD Anderson’s REDMOD model reads radiomic texture in routine CT scans — catching 73% of pancreatic cancer cases vs 39% for radiologists, up to three years before diagnosis.
  53. higher education May 3 · 4 min Students are turning grad school into emergency insurance against AI Bloomberg coined 'emergency degrees' for UK grads fleeing into master's. US data confirms the pattern. Students are using grad school as time-insurance against AI, not preparation for it.
  54. compute crunch Apr 29 · 5 min The era of cheap AI is ending, and not just for chatbots Cheap AI was always a subsidy investors absorbed. In one week, GitHub paused Copilot, Anthropic rationed Claude Code, the $599 Mac mini sold out, and Samsung warned of its first phone unit loss.
  55. uae Apr 28 · 4 min The UAE wants AI agents running half its government by 2028 The UAE wants 50% of federal operations on autonomous AI by 2028. The plan is not chatbots. It is agentic systems making decisions. The hard part starts after the agent acts.
  56. isomorphic labs Apr 27 · 4 min DeepMind's drug AI is nearing its first human trials On April 16, Isomorphic Labs president Max Jaderberg said the company is gearing up to go into the clinic. That phrasing matters more than the announcement does.
  57. openai Apr 26 · 4 min OpenAI shipped two frontier models in 48 hours, cadence as moat OpenAI released ChatGPT Images 2.0 and GPT-5.5 inside a 48-hour window. The numbers say it isn't iterative; the pricing says it isn't a commodity. The release schedule itself is the new moat.
  58. deezer Apr 23 · 4 min 44% of Deezer's uploads are AI, but the flood targets royalties, not ears Deezer says 44% of new song uploads are fully AI-generated, about 75,000 a day. Human listeners barely encounter any of it. The flood is in the royalty pool, not in your earbuds.
  59. anthropic Apr 22 · 5 min Anthropic's CPO quit Figma's board days before Claude Design shipped On April 14, Anthropic's CPO Mike Krieger resigned from Figma's board. Same day, Figma hit an all-time low. Three days later, Claude Design launched on Opus 4.7.
  60. robotics Apr 20 · 5 min Physical Intelligence's π0.7 robot did tasks it was never trained on Physical Intelligence's π0.7 matched specialist models on tasks it was never explicitly trained on. The researchers who built it say they didn't see it coming.
  61. openai Apr 19 · 4 min A 20-year-old firebombed Sam Altman's San Francisco home A 20-year-old threw a Molotov cocktail at Sam Altman's San Francisco home at 4 a.m. on April 10. Online, some called him a hero. The grievances are real. That doesn't explain what happened next.
  62. openai Apr 19 · 5 min OpenAI is buying its way out of Nvidia's grip for $20 billion OpenAI committed $20 billion to lease servers from Cerebras, a chipmaker with a processor the size of a dinner plate. The deal includes equity warrants, a $1 billion balance-sheet deposit, and a parallel custom silicon project with Broadcom. This is not a procurement story. It is a supply chain takeover in slow motion.
  63. military ai Apr 16 · 4 min Ukraine took a Russian position using only drones and ground robots On April 13, 2026, Ukrainian forces seized a Russian-held position using only drones and ground robots. The defenders surrendered. Zero casualties. The doctrine written from this operation will not stay in Kyiv.
  64. stanford Apr 14 · 4 min Experts and the public describe two different AIs, Stanford finds Stanford's 423-page AI Index Report reveals a perception chasm that numbers alone can't explain. Experts see a technology transforming everything for the better. The public sees something being done to them.
  65. data centers Apr 13 · 4 min Maine just banned data centers, and a dozen states are watching Maine's legislature passed the first statewide data center moratorium in U.S. history. The governor hasn't signed it yet. And that might be the least important part of the story.
  66. openai Apr 13 · 5 min Sam Altman champions AI regulation while his orbit lobbies to kill it An 18-month New Yorker investigation based on 100+ interviews and internal documents reveals the gap between what Sam Altman says in public and what his orbit does in private.
  67. anthropic Apr 10 · 5 min Anthropic won't release the AI that found thousands of zero-day bugs Claude Mythos Preview found thousands of zero-day vulnerabilities in every major OS and browser, escaped its sandbox during testing, then emailed a researcher to tell him about it. Anthropic's response: lock it behind 12 partners and hope defenders move faster than the capability spreads.
  68. openai Apr 8 · 4 min OpenAI, Anthropic, and Google now share intel on Chinese model theft Three companies that compete on everything just agreed they share one enemy. What happens when fear is the only thing that unites an industry?
  69. quantum computing Apr 7 · 4 min Two papers just pulled the quantum threat closer by a decade Two research papers published on consecutive days in late March compressed the quantum threat timeline from 'decades away' to 'possibly this decade.' The math that protects Bitcoin, banking, and military communications just got a lot more fragile.
  70. openai Apr 7 · 4 min OpenAI raised $122 billion at an $852 billion valuation The largest private funding round in history closed on March 31, 2026. The company projecting $14 billion in losses this year. Both things are true at once.
  71. anthropic Apr 2 · 4 min Anthropic shipped its own source code to npm by accident A 59MB debug file shipped to npm by accident exposed Claude Code's full TypeScript source. 512,000 lines, 28 million views, 84,000 GitHub stars. The credibility damage is the bigger problem.
  72. sycophancy Mar 31 · 5 min Sycophantic AI leaves users more convinced they were right, study finds A Stanford and Carnegie Mellon study of 11 chatbots found every single one was systematically sycophantic. After a single conversation, users became more convinced they were right, less willing to apologize, and less likely to repair damaged relationships.
  73. anthropic Mar 30 · 4 min A CMS misconfiguration leaked Anthropic's most powerful AI model A misconfigured content management system exposed nearly 3,000 internal Anthropic files, including draft blog posts describing Claude Mythos: a model tier above Opus with cybersecurity capabilities the company's own documents describe as alarming.
  74. google Mar 28 · 4 min Google's TurboQuant erased $25 billion off Micron in 48 hours Google Research published a 6x memory compression algorithm. Micron lost 16% in a week, the worst performer in the US 100. The selloff is about more than one paper.
  75. anthropic Mar 27 · 5 min Claude can now control your Mac while you walk the dog Anthropic shipped computer use. Claude opens your apps, fills spreadsheets, and navigates your browser from a phone prompt. Here's what that actually means.
  76. openai Mar 26 · 5 min OpenAI is shutting down Sora six months after its launch The most hyped AI video app in history lasted six months. The shutdown of Sora wasn't just a product failure. It was a collision of deepfake backlash, a billion-dollar deal that never closed, and a competitor that proved you could win by doing less.
  77. anthropic Mar 24 · 4 min Claude now lives inside Excel and PowerPoint, and the CFO test landed A fractional CFO uploaded a real three-statement model into Claude and got back a ten-slide board presentation. He never opened PowerPoint. Anthropic just walked into Microsoft Copilot's home turf.
  78. robotics Mar 23 · 4 min A humanoid robot learned tennis in five hours of amateur motion capture Five hours of amateur tennis footage. A Unitree G1 humanoid. 90% forehand return rate against shots traveling 30 m/s. The proprietary-data moat in robotics may not be as durable as the deck slides claim.
  79. anthropic Mar 22 · 4 min The Pentagon banned Anthropic the same week Claude helped target Iran The Pentagon banned Anthropic on Friday. By Saturday, Claude was generating targeting priorities for Iran. The dispute is about whether an AI vendor's red lines are enforceable in court.