GPT-5.6 Sol finds critical PHP bugs; attacks preceded patches

The PHP episode shows how frontier AI models are changing vulnerability discovery. Researchers using GPT-5.6 Sol found critical bugs in code that powers up to 70% of global websites, and organizations have been scrambling to patch them. That defensive win came with a mirror image: Amazon.com Inc. disclosed that attackers began targeting PHP vulnerabilities four days before patches were released, and exploit attempts seen by Cloudflare Inc. have since climbed into the millions.

The body frames this as part of a wider shift in enterprise security. Dell Technologies World earlier this year carried a message that data protection and cyber resilience have emerged as foundational control layers for enterprise AI. Dell is a participant in Anthropic PBC's Project Glasswing, which gives vetted organizations access to powerful AI tools to secure critical systems, and Dell executives describe a falling cost of entry for attackers. A Microsoft Corp. monthly report listed 1,453 new vulnerabilities in October alone.

Separately, the quantum threat is entering the same conversation. A DigiCert Inc. study found only 7% of organizations surveyed have deployed quantum-safe or hybrid cryptography across most of their digital certificates, while an Anthropic PBC report detailed how researchers using Claude Mythos Preview found improved ways to attack cryptographic algorithms, including weakening HAWK, a candidate in NIST's post-quantum signature process. The body ties these threads to a single conclusion: infrastructure-level security is becoming the baseline as agentic AI and faster exploitation compress response times.