According to OpenAI and The Rundown AI, security firm Calif used OpenAI’s GPT-5.6 Sol to uncover critical PHP vulnerabilities also found by Wiz, prompting a two-month coordinated fix with PHP maintainers and Cloudflare, with patches now released and the NSA advising offline mitigation for unpatched systems.