logoalt Hacker News

letmevoteplease • today at 3:10 AM • 3 replies • view on HN

There are multiple write-ups on how the vulnerability works. The Calif one is the most detailed. Also, no one used Claude. There's a whole world of information out there when you read the original sources instead of social media distortions.

https://calif.io/php2shell/

https://www.wiz.io/blog/php2shell-php-rce


Replies

infinite_spin • today at 3:15 AM

> Calif identified a critical flaw using GPT‑5.6 Sol as part of our Patch the Planet initiative, with Wiz also independently discovering and reporting both vulnerabilities

https://openai.com/index/coordinated-disclosure-of-critical-...

> Using Gemini 4 Argon, the team at Wiz has shown why frontier AI is a game-changer for cyber defense. For over a decade, these critical vulnerabilities remained unaddressed because vulnerability discovery and exploitation were incredibly complex.

- Raluca Ada Popa, Head of Gemini Security, Google DeepMind

➕ show 2 replies
ra0x3 • today at 3:32 AM

Haven't you heard? The popular thing to do nowadays is to accuse someone of using AI the second anything is produced whatsoever.

➕ show 3 replies