The Hallway Track
Engineering Insights

The most vulnerable week in internet history...

Fireship · Oct 23, 2026 · Engineering Insights

AI model GPT 5.6 Soul discovered a critical PHP RCE vulnerability affecting servers for a decade

“vulnerability was actually found a few months ago by a security firm using GPT 5.6 Soul who brought it up with the PHP team”

Fireship's security roundup highlights a week of critical vulnerabilities, notable for two AI-adjacent signals: a PHP RCE (PHP2shell) was discovered by a security firm using an AI model, and US banks are detecting unauthorized third-party agents operating inside customer accounts. The primary content is a general security roundup rather than a focused AI industry story, limiting its direct newsletter relevance.

ai-security-research vulnerability-discovery ai-agents supply-chain

Watch / read the original source →